Draytek Vigor 2110, User Manual

Page 1: ......

Page 2: ...Vigor2110 Series User s Guide ii Vigor2110 Series Broadband Firewall Router User Guide Version 1 0 UK Date 15 04 2009...

Page 3: ...user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep your purchase receipt in a s...

Page 4: ...te radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will...

Page 5: ...cessing Web Page 15 2 3 Changing Password 16 2 4 Configuring Router for Internet Connectivity 18 2 5 Online Status 20 2 6 Saving Configuration 21 3 UserModeOperation 23 3 1 Internet Access 23 3 1 1 Ba...

Page 6: ...s 73 4 1 1 Basics of Internet Protocol IP Network 73 4 1 2 PPPoE 74 4 1 3 Static or Dynamic IP 75 4 1 4 PPTP 77 4 2 LAN 79 4 2 1 Basics of LAN 79 4 2 2 General Setup 80 4 2 3 VLAN 82 4 2 4 Bind IP to...

Page 7: ...Local Certificate 146 4 11 2 Trusted CA Certificate 148 4 11 3 Certificate Backup 149 4 12 VoIP 149 4 12 1 DialPlan 151 4 12 2 SIP Accounts 158 4 12 3 Phone Settings 162 4 12 4 Status 167 4 13 Wirele...

Page 8: ...est a CA Certificate and Set as Trusted on Windows CA Server 205 5 3 Calling Scenario for VoIP function 207 5 3 1 Calling via SIP Sever 207 5 3 2 Peer to Peer Calling 209 5 4 Upgrade Firmware for Your...

Page 9: ...data rate of each wireless station client Vigor2110 V models provide two analogue phone connectors and one line port It supports multiple SIP registrars with high flexible configuration and call hand...

Page 10: ...menu On The WAN port is connected WAN Blinking It will blink while transmitting data On The port is connected Off The port is disconnected LAN 1 2 3 4 Blinking The data is transmitting On A USB devic...

Page 11: ...s Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will resta...

Page 12: ...is active QoS On The QoS function is active On The DoS DDoS function is active DoS Blinking It will blink while detecting an attack On The WPS is on Off The WPS is off WPS Blinking Waiting for wirele...

Page 13: ...s Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will resta...

Page 14: ...ok Phone1 Phone2 Blinking A phone call comes On A PSTN phone call comes in and out However when the phone call is disconnected the LED will be off about six seconds later Line Off There is no PSTN pho...

Page 15: ...communication Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly...

Page 16: ...er for Vigor2110 series n model 6 Connect one end of the power cord to the power port of this device Connect the other end to the wall outlet of electricity 7 Power on the router 8 Check the ACT and W...

Page 17: ...he steps below to configure settings for connected computers or wireless clients 1 Connect the printer with the router through USB parallel port 2 Open Start Settings Printer and Faxes 3 Open File Add...

Page 18: ...Series User s Guide 10 4 Click Local printer attached to this computer and click Next 5 In this dialog choose Create a new port Type of port and use the drop down list to select Standard TCP IP Port C...

Page 19: ...following dialog type 192 168 1 1 router s LAN IP in the field of Printer Name or IP Address and type IP_192 168 1 1 as the port name Then click Next 7 Click Standard and choose Generic Network Card 8...

Page 20: ...click Next 10 For the final stage you need to go back to Control Panel Printers and edit the property of the new printer you have added 11 Select LPR on Protocol type p1 number 1 as Queue Name Then c...

Page 21: ...know whether your printer is supported or not please visit www draytek com to find out the printer list Open Support FAQ find out the link of Printer Server and click it then click the What types of p...

Page 22: ...Vigor2110 Series User s Guide 14 This page is left blank...

Page 23: ...Notice You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192 16...

Page 24: ...1 Open a web browser on your PC and type http 192 168 1 1 A pop up window will open to ask for username and password 2 Please type admin admin on Username Password for administration operation Otherwi...

Page 25: ...the type of the router you have 4 Go to System Maintenance page and choose Administrator Password User Password or 5 Enter the login password the default is blank on the field of Old Password Type New...

Page 26: ...r the ISP settings are set correctly Click PPPoE PPTP Static or Dynamic IP link to review the settings that you configured previously Note The web page for Internet Access will change according to the...

Page 27: ...appropriately 3 Check if IP Address Subnet Mask and Gateway are set correctly must identify with the values from your ISP if you choose Specify an IP address F Fo or r P PP PT TP P U Us se er rs s 1...

Page 28: ...the LAN interface TX Packets Displays the total transmitted packets at the LAN interface RX Packets Displays the total number of received packets at the LAN interface WAN Status Line Displays the phys...

Page 29: ...at ti io on n Each time you click OK on the web page for saving the configuration you can find messages showing the system interaction with you Ready indicates the system is ready for you to input set...

Page 30: ...Vigor2110 Series User s Guide 22...

Page 31: ...wo or rk k IP means Internet Protocol Every device in an IP based Network including routers print server and host PCs needs an IP address to identify its location on the network To avoid address conf...

Page 32: ...tion is required for bridging customer premises equipment CPE Point to Point Protocol over Ethernet PPPoE connects a network of hosts via an access device to a remote access concentrator or aggregatio...

Page 33: ...eaking down the Internet after passing through the time without any action Fixed IP Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address Default MAC Address You...

Page 34: ...WAN Physical Type Choose Auto negotiation as the physical type for your router WAN Connection Detection Such function allows you to verify whether network connection is alive or not through ARP Detect...

Page 35: ...ter if you want to use Static IP mode If necessary type in secondary IP address for necessity in the future 3 3 1 1 4 4 P PP PT TP P To use PPTP as the accessing protocol of the internet please choose...

Page 36: ...ify some data IP Address Type the IP address Subnet Mask Type the subnet mask 3 3 2 2 L LA AN N Local Area Network LAN is a group of subnets regulated and ruled by router The design of network structu...

Page 37: ...lay Agent help you to redirect the DHCP request to the specified location Enable Server Let the router assign IP address to every host in the LAN Disable Server Let you manually assign IP address to e...

Page 38: ...mechanism that one or more private IP addresses can be mapped into a single public one Public IP address is usually assigned by your ISP for which you may get charged Private IP addresses are recogni...

Page 39: ...need a public IP address for each server and this public IP address domain name are recognized by all users Since the server is actually located inside the LAN the network well protected by NAT of th...

Page 40: ...ame Enter the description of the specific network service Protocol Select the transport layer protocol TCP or UDP Public Port Specify which port can be redirected to the specified Private IP and Port...

Page 41: ...of host in the LAN However other IP protocols for example Protocols 50 ESP and 51 AH do not travel on a fixed port Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any prot...

Page 42: ...n Ports allows you to open a range of ports for the traffic of special applications Common application of Open Ports includes P2P application e g BT KaZaA Gnutella WinMX eMule and others Internet Came...

Page 43: ...of private IP addresses of local hosts will automatically pop up Select the appropriate IP address of the local host in the list Protocol Specify the transport layer protocol It could be TCP UDP or n...

Page 44: ...in name for the router Enable the Function and Add a Dynamic DNS Account 1 Assume you have a registered domain name from the DDNS provider say hostname dyndns org and an account with username test and...

Page 45: ...from their websites Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu uncheck Enable Dynamic DNS Setup and push Clear All button to disable the function and clear all acco...

Page 46: ...raversal of UPnP enables the multimedia features of your applications to operate This has to manually set up port mappings or use other similar methods The screenshots below show examples of this faci...

Page 47: ...twork VoIP enables you to use your broadband Internet connection to make toll quality voice calls over the Internet There are many different call signaling protocols methods by which VoIP devices can...

Page 48: ...below z Calling via SIP Servers First the Vigor V models of yours will have to register to a SIP Registrar by sending registration messages to validate Then both parties SIP proxies will forward the s...

Page 49: ...lows you to set phone book and digit map for the VoIP function Click the Phone Book and Digit Map links on the page to access into next pages for dialplan settings P Ph ho on ne e B Bo oo ok k In this...

Page 50: ...9 and Display Name The Caller ID that you want to be displayed on your friend s screen This let your friend can easily know who s calling without memorizing lots of SIP URL Address SIP URL Enter your...

Page 51: ...time the phone call will be changed from VoIP phone into PSTN call according to the loop through direction chosen Note that during the phone switch the blare of phone will appear for a short time And...

Page 52: ...de the OP number will be deleted by the prefix number for calling out through the specific VoIP interface Take the above picture Prefix Table Setup web page as an example the OP number of 886 will be...

Page 53: ...re Prefix Table Setup web page as an example if the dial number is between 7 and 9 that number can apply the prefix number settings here Max Len Set the maximum length of the dial number for applying...

Page 54: ...will be changed based on the type you selected for barring Type Interface All means all the phone calls will be blocked with such mechanism Additionally you can set advanced settings for call barring...

Page 55: ...gured schedules For Block IP Address this function can block incoming calls through Phone port coming from IP address Such control also can be done based on preconfigured schedules R Re eg gi io on na...

Page 56: ...swer of the connected phone Do Not Disturb Act Dial the number typed in this field to invoke the function of DND Do Not Distrub Deact Dial the number typed in this field to release the DND function Hi...

Page 57: ...lay Then check the Enable box to make the PSTN number available for dial whenever you need 3 3 5 5 2 2 S SI IP P A Ac cc co ou un nt ts s In this section you set up your own SIP settings When you appl...

Page 58: ...of SIP address before Ring Port Specify which port will ring when receiving a phone call Set Phone1 or Phone 2 as the default ring port for the SIP account STUN Server Type in the IP address or domain...

Page 59: ...g SIP message for building a session The default value is 5060 Your peer must set the same value in his her Registrar Domain Realm Set the domain name or IP address of the SIP Registrar server Proxy S...

Page 60: ...Registrar again NAT Traversal Support If the router e g broadband router you use connects to internet by other device you have to set this function for your necessity None Disable this function Stun C...

Page 61: ...ettings that configured in the advanced settings page of Phone Index Gain Display the volume gain settings for Mic Speaker that configured in the advanced settings page of Phone Index Default SIP Acco...

Page 62: ...ck up the phone set Session Timer Check the box to enable the function In the limited time that you set in this field if there is no response the connecting call will be closed automatically Call Forw...

Page 63: ...hone call is waiting for your response Click hook flash to pick up the waiting phone call Call Transfer Check this box to invoke this function Click hook flash to initiate another phone call When the...

Page 64: ...ded for fitting the telecommunication custom for the local area of the router installed Wrong tone settings might cause inconvenience for users To set the sound pattern of the phone set simply choose...

Page 65: ...se the default setting DTMF DTMF Mode There are four DTMF modes for you to choose InBand Choose this one then the Vigor will send the DTMF tone as audio directly when you press the keypad on the phone...

Page 66: ...ction status IDLE Indicates that the VoIP function is idle HANG_UP Indicates that the connection is not established busy tone CONNECTING Indicates that the user is calling out WAIT_ANS Indicates that...

Page 67: ...fice home Any authorized staff can bring a built in WLAN client PDA or notebook into a meeting room for conference without laying a clot of LAN cable or drilling holes everywhere Wireless LAN enables...

Page 68: ...encryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connectio...

Page 69: ...to Mixed 11b 11g 11g Only 11b Only Mixed 11g 11n 11n Only and Mixed 11b 11g 11n stations simultaneously Simply choose Mix 11b 11g 11n mode SSID Means the identification of the wireless LAN SSID can b...

Page 70: ...re of Vigor N61 wireless utility window choose Enable for TxBURST on the tab of Option Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join...

Page 71: ...A Mode There are several modes provided for you to choose Disable Turn off the encryption mechanism WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK Accepts onl...

Page 72: ...ing by 0x such as 0x4142434445464748494A4B4C4D All wireless devices must support the same WEP encryption bit size and have the same key Four keys can be entered here but only one key can be selected a...

Page 73: ...ribute s select to isolate the wireless connection of the wireless client of the MAC address from LAN Add Add a new MAC address into the list Delete Delete the selected MAC address in the list Edit Ed...

Page 74: ...p there are several items that you have to know the way of configuration System Status User Password Time setup and Reboot System Below shows the menu items for System Maintenance 3 3 7 7 1 1 S Sy ys...

Page 75: ...nterface DNS Display the assigned IP address of the primary DNS WAN Link Status Display current connection status MAC Address Display the MAC address of the WAN Interface Connection Display the connec...

Page 76: ...ssword in this filed Confirm Password Type in the new password again When you click OK the login window will appear Please use the new password to access into the web configurator again 3 3 7 7 3 3 T...

Page 77: ...ollowing page Click OK The router will take 5 seconds to reboot the system Note When the system pops up Reboot System web page after you configure web settings please click OK to reboot your router fo...

Page 78: ...HCP assigned IP address for it Leased Time It displays the leased time of the specified PC HOST ID It displays the host ID name of the specified PC Refresh Click it to reload the page 3 3 8 8 2 2 T Tr...

Page 79: ...this button to start the ping work The result will be displayed on the screen Clear Click this link to remove the result on the window 3 3 8 8 4 4 T Tr ra ac ce e R Ro ou ut te e Click Diagnostics and...

Page 80: ...Vigor2110 Series User s Guide 72 Host IP Address It indicates the IP address of the host Run Click this button to start route tracing work Clear Click this link to remove the result on the window...

Page 81: ...ease go to WAN group and click the Internet Access link 4 4 1 1 1 1 B Ba as si ic cs s o of f I In nt te er rn ne et t P Pr ro ot to oc co ol l I IP P N Ne et tw wo or rk k IP means Internet Protocol...

Page 82: ...r r P Pu ub bl li ic c I IP P A Ad dd dr re es ss s f fr ro om m I IS SP P In ADSL deployment the PPP Point to Point style authentication and authorization is required for bridging customer premises e...

Page 83: ...et by telnet command PPP MP Setup PPP Authentication Select PAP only or PAP or CHAP for PPP If you want to connect to Internet all the time you can check Always On Idle Timeout Set the timeout for bre...

Page 84: ...Auto negotiation as the physical type for your router WAN Connection Detection Such function allows you to verify whether network connection is alive or not through ARP Detect or Ping Detect Mode Choo...

Page 85: ...ry type in secondary IP address for necessity in the future 4 4 1 1 4 4 P PP PT TP P To use PPTP as the accessing protocol of the internet please choose PPTP from Internet Access menu The following we...

Page 86: ...rovides service to always assign you the same IP address whenever you request In this case you can fill in this IP address in the Fixed IP field Please contact your ISP before you want to use this fun...

Page 87: ...vice versa Besides Vigor router has a built in DHCP server that assigns private IP address to each local host See the following diagram for a briefly understanding In some special case you may have a...

Page 88: ...he network Default 255 255 255 0 24 DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network so it automatically...

Page 89: ...IP address also they may have a human friendly easy to remember name such as www yahoo com The DNS server converts the user friendly name into its equivalent IP address Force DNS manual setting Force...

Page 90: ...lowing page will appear Click Enable to invoke VLAN function To add or remove a VLAN please refer to the following example 1 If VLAN 0 is consisted of hosts linked to P1 and P2 and VLAN 1 is consisted...

Page 91: ...disable this function All the settings on this page will be invalid Strict Bind Click this radio button to block the connection of the IP MAC which is not listed in IP Bind List ARP Table This table i...

Page 92: ...o the router s public IP address and the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes z Save...

Page 93: ...dress port of the server The port redirection can only apply to incoming traffic To use this function please go to NAT page and choose Port Redirection web page The Port Redirection Table provides 20...

Page 94: ...te IP address of the internal host providing the service If you choose Range as the port redirection mode you will see two boxes on this field Type a complete IP address in the first box as the starti...

Page 95: ...Protocols 50 ESP and 51 AH do not travel on a fixed port Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN Regular web surfing and ot...

Page 96: ...firewall Click DMZ Host to open the following page Private IP Enter the private IP address of the DMZ host or click Choose PC to select one Choose PC Click this button and then a window will automati...

Page 97: ...exploits Click Open Ports to open the following page Index Indicate the relative number for the particular entry that you want to offer service in a local host You should click the appropriate index n...

Page 98: ...PC Click this button and subsequently a window having a list of private IP addresses of local hosts will automatically pop up Select the appropriate IP address of the local host in the list Protocol S...

Page 99: ...ode there are three options offered for you to apply Accelerate most heavy traffic sessions This function is the same as in Auto mode Apply the Class Rule in Quality of Service Rules configured in QoS...

Page 100: ...wn the IP filter architecture categorizes traffic into two Call Filter and Data Filter z Call Filter When there is no existing Internet connection Call Filter is applied to all traffic all of which sh...

Page 101: ...re database Any malicious packet that might duplicate itself to paralyze the host in the secure LAN will be strictly blocked and a Syslog message will be sent as warning if you set up Syslog server Al...

Page 102: ...sent to Syslog server Please refer to section Syslog Mail Alert for more detailed information URL Content Filter Select one of the URL Content Filter profile settings created in CSM URL Content Filte...

Page 103: ...rectness of URL Content Filter The default value for this setting is ANSI 1252 Latin I If you do not choose any codepage no decoding job of URL will be processed Please use the drop down list to choos...

Page 104: ...Setup to open the setup page To edit or add a filter click on the set number to edit the individual set The following page will be shown Each filter set contains up to 7 rules Click on the rule numbe...

Page 105: ...at certain time interval only You may choose up to 4 schedules out of the 15 schedules pre defined in Applications Schedule setup The default setting of this filed is blank and the function will alway...

Page 106: ...is dialog In addition if you want to use the IP range from defined groups or objects please choose Group and Objects as the Address Type From the IP Group drop down list choose the one that you want t...

Page 107: ...ule only to packets that are too short to contain a complete header Filter Specifies the action to be taken when packets match the rule Block Immediately Packets matching the rule will be dropped imme...

Page 108: ...g For troubleshooting needs you can specify the filter log and or CSM log here Check the corresponding box to enable the log function Then the filter log and or CSM log will be shown on Draytek Syslog...

Page 109: ...the performance will be However if the network is not stable small value will be proper Session timeout Setting timeout for sessions can make the best utilization of network resources However Queue ti...

Page 110: ...two IP filters call filter or data filter You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner Each filter set is composed by 7 filter rules which can...

Page 111: ...SYN packets attempt to exhaust the limited resource of Vigor router By default the threshold and timeout values are set to 50 packets per second and 10 seconds respectively Enable UDP flood defense C...

Page 112: ...broadcasting ICMP echo request Block trace router Check the box to enforce the Vigor router not to forward any trace route packets Block SYN fragment Check the box to activate the Block SYN fragment...

Page 113: ...owever the protocol types greater than 100 are reserved and undefined at this time Therefore the router should have ability to detect and reject this kind of packets Warning Messages We provide Syslog...

Page 114: ...em with objects and bind them with groups for using conveniently Later we can select that object group that can apply it For example all the IPs in the same department can be defined with an IP object...

Page 115: ...e Determine the address type for the IP address Select Single Address if this object contains one IP address only Select Range Address if this object contains several IPs within a range Select Subnet...

Page 116: ...ser s Guide 108 4 4 6 6 2 2 I IP P G Gr ro ou up p This page allows you to bind several IP objects into one IP group Set to Factory Default Clear all profiles Click the number under Index column for s...

Page 117: ...wed Interface Choose WAN LAN or Any to display all the available IP objects with the specified interface Available IP Objects All the available IP objects with the specified interface chosen above wil...

Page 118: ...je ec ct t You can set up to 96 sets of Service Type Objects with different conditions Set to Factory Default Clear all profiles Click the number under Index column for settings in detail Name Type a...

Page 119: ...ofile when the first and last value are the same it indicates all the ports except the port defined here when the first and last values are different it indicates that all the ports except the range d...

Page 120: ...he available service objects that you have added on Objects Setting Service Type Object will be shown in this box Selected Service Type Objects Click button to add the selected IP objects in this box...

Page 121: ...u browse the webpage the page with gambling information will be watched out and be passed blocked based on the configuration on Firewall settings 4 4 6 6 6 6 K Ke ey yw wo or rd d G Gr ro ou up p This...

Page 122: ...7 7 F Fi il le e E Ex xt te en ns si io on n O Ob bj je ec ct t This page allows you to set eight profiles which will be applied in CSM URL Content Filter All the files with the extension names speci...

Page 123: ...eries User s Guide 115 Profile Name Type a name for this profile Type a name for such profile and check all the items of file extension that will be processed in the router Finally click OK to save th...

Page 124: ...all profiles Click the number under Profile column for configuration in details There are several types of Instant Messenger IM provided here for you to choose to disallow people using Simple check t...

Page 125: ...ofiles will be applied in CSM IM P2P Filter Profile for filtering Set to Factory Default Clear all profiles Click the number under Profile column for configuration in details There are several items f...

Page 126: ...Set to Factory Default Clear all profiles Click the number under Profile column for configuration in details Applications for tunneling and streaming are listed in the page for you to choose to disall...

Page 127: ...ing facility will decline the HTTP request to that web page thus can limit user s access to the website You may imagine URL Content Filter as a well trained convenience store clerk who won t sell adul...

Page 128: ...andle millions of requests for categorization Note The priority of URL Content Filter is higher than Web Content Filter 4 4 7 7 1 1 I IM M P P2 2P P F Fi il lt te er r P Pr ro of fi il le e You can de...

Page 129: ...al firewall in the field of filtering Because it checks the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP h...

Page 130: ...Feature will be inactive Either URL Access Control First When all the packages matching with the conditions specified in URL Access Control and Web Feature below such function can determine the prior...

Page 131: ...fore Action This setting is available only when Either URL Access Control First or Either Web Feature First is selected Pass Allow accessing into the corresponding webpage with the keywords listed on...

Page 132: ...g into the corresponding webpage with the keywords listed on the box below If the web pages do not match with the specified feature set here it will be processed with reverse action Cookie Check the b...

Page 133: ...in Vigor router and chosen the categories of website you wish to restrict each URL address requested e g www bbc co uk will be checked against our server database This database is updated as frequent...

Page 134: ...he box below If the web pages do not match with the specified feature set here it will be processed with reverse action Log None There is no log file will be recorded for this profile Pass Only the lo...

Page 135: ...rtant accesses impacted To solve the problem you can use limit session to limit the session procession for specified Hosts In the Bandwidth Management menu click Sessions Limit to open the web page To...

Page 136: ...be set previously in Application Schedule web page and you can use the number that you have set in that web page 4 4 8 8 2 2 B Ba an nd dw wi id dt th h L Li im mi it t The downstream or upstream fro...

Page 137: ...r the specific limitation you set for each index RX limit Define the limitation for the speed of the downstream If you do not set the limit in this field the system will use the default speed for the...

Page 138: ...Dynamic DNS feature you have to apply for free DDNS service to the DDNS service providers The router provides up to three accounts from three different DDNS service providers Basically Vigor routers a...

Page 139: ...provider for the DDNS account Service Type Select a service type Dynamic Custom or Static If you choose Custom you can modify the domain that is chosen in the Domain Name field Domain Name Type in one...

Page 140: ...utton to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is another way to set up time You can inquiry an NTP server a tim...

Page 141: ...tion to be always on Force On from 9 00 to 18 00 for whole week Other time the Internet access connection should be disconnected Force Down Office Hour Force On Mon Sun 9 00 am to 6 00 pm 1 Make sure...

Page 142: ...ion status and control status will be able to be activated The NAT Traversal of UPnP enables the multimedia features of your applications to operate This has to manually set up port mappings or use ot...

Page 143: ...ctivating the UPnP function Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches Non privileged u...

Page 144: ...ke e o on n L LA AN N A PC client on LAN can be woken up by the router it connects When a user wants to wake up a specified PC through the router he she must type correct MAC address of the specified...

Page 145: ...Vigor2110 Series User s Guide 137...

Page 146: ...t ty y To use digital certificate for peer authentication in either LAN to LAN connection or Remote User Dial In connection here you may edit a table of peer certificate for selection As shown below t...

Page 147: ...ific fields of digital signature to accept the peer with matching value The field includes Country C State ST Location L Organization O Organization Unit OU Common Name CN and Email E 4 4 1 10 0 2 2 L...

Page 148: ...files The symbol V and X represent the profile to be active and inactive respectively Click each index to edit each profile and you will get the following page Each LAN to LAN profile includes 3 subgr...

Page 149: ...etbios Naming Packet inside the tunnel Always On or Idle Timeout Always On Check to enable router always keep VPN connection Idle Timeout The default value is 300 seconds If the connection has been id...

Page 150: ...ply the IPSec policy first if it is applicable during negotiation Otherwise the dial out VPN connection becomes one pure L2TP connection Must Specify the IPSec policy to be definitely applied on the L...

Page 151: ...since more exchanges are done in a secure channel to set up the IPSec session However the Aggressive mode is faster The default value in Vigor router is Main mode IKE phase 1 proposal To propose the...

Page 152: ...ation phase If the PPP IP address is fixed by remote side specify the fixed IP address here Do not change the default value if you do not select PPTP or L2TP Remote Network IP Remote Network Mask Add...

Page 153: ...nnections You may disconnect any VPN connection by clicking Drop button You may also aggressively Dial out by using Dial out Tool and clicking Dial button Dial Click this button to execute dial out fu...

Page 154: ...Any entity wants to utilize digital certificates should first request a certificate issued by a CA server It should also retrieve certificates of other trusted CA servers so it can authenticate the p...

Page 155: ...Import Click this button to import a saved file as the certification information Refresh Click this button to refresh the information listed below View Click this button to view the detailed settings...

Page 156: ...ick IMPORT to open the following window Use Browse to find out the saved text file Then click Import The one you imported will be listed on the Trusted CA Certificate window Then click Import to use t...

Page 157: ...d mobility in VoIP structure Every one who wants to talk using his her SIP Uniform Resource Identifier SIP Address The standard format of SIP URI is sip user password host port Some fields may be opti...

Page 158: ...me if you are with the same SIP Registrar Please refer to the section 4 5 1 z Peer to Peer Before calling you have to know your friend s IP Address The Vigor VoIP Routers will build connection between...

Page 159: ...o on ne e B Bo oo ok k In this section you can set your VoIP contacts in the phonebook It can help you to make calls quickly and easily by using speed dial Phone Number There are total 60 index entrie...

Page 160: ...connection can be assured Loop through For the model of Vigor 2110Vn the selection should be as the following Backup Phone Number When the VoIP phone is obstructs or the Internet breaks down for some...

Page 161: ...trip When you choose this mode the OP number will be deleted by the prefix number for calling out through the specific VoIP interface Take the above picture Prefix Table Setup web page as an example t...

Page 162: ...ttings Take the above picture Prefix Table Setup web page as an example if the dial number is between 7 and 9 that number can apply the prefix number settings here Max Len Set the maximum length of th...

Page 163: ...calls will be blocked with such mechanism Index 1 15 in Schedule Enter the index of schedule profiles to control the call barring according to the preconfigured schedules Refer to section Application...

Page 164: ...gured schedules For Block IP Address this function can block incoming calls through Phone port coming from IP address Such control also can be done based on preconfigured schedules R Re eg gi io on na...

Page 165: ...forward all the incoming calls to the specified place Call Forward Deact Dial the number typed in this field to release the call forward function Call Forward Busy Act Dial the number typed in this fi...

Page 166: ...from IP address Block IP Calls Deact Dial the number typed in this field to release this function Block Last Calls Act Dial the number typed in this field to block the last incoming phone call P PS ST...

Page 167: ...rver Proxy Display the domain name or IP address of the SIP proxy server Account Name Display the account name of SIP address before Ring Port Specify which port will ring when receiving a phone call...

Page 168: ...er must set the same value in his her Registrar Domain Realm Set the domain name or IP address of the SIP Registrar server Proxy Set domain name or IP address of SIP proxy server By the time you can t...

Page 169: ...ternet by other device you have to set this function for your necessity None Disable this function Stun Choose this option if there is Stun server provided for your router Manual Choose this option if...

Page 170: ...page of Phone Index Gain Display the volume gain settings for Mic Speaker that configured in the advanced settings page of Phone Index Default SIP Account draytel_1 is the default SIP account You can...

Page 171: ...the box to enable it Type in the SIP URL in the field for dialing automatically when you pick up the phone set Session Timer Check the box to enable the function In the limited time that you set in th...

Page 172: ...ller ID Check this box to hide the caller ID on the display panel of the phone set Call Waiting Check this box to invoke this function A notice sound will appear to tell the user new phone call is wai...

Page 173: ...ccount registered Check this box to invoke the function In addition you can press the Advanced button to configure tone settings volume gain MISC and DTMF mode Advanced setting is provided for fitting...

Page 174: ...adjust the loudness of the dial tone The smaller the number is the louder the dial tone is It is recommended for you to use the default setting Ring Frequency This setting is used to drive the freque...

Page 175: ...e information will update immediately when the Refresh button is clicked Port It shows current connection status for the port of Phone1 and Phone2 Status It shows the VoIP connection status IDLE Indic...

Page 176: ...ts The Vigor n model a k a Vigor wireless router is designed for maximum flexibility and efficiency of a small office home Any authorized staff can bring a built in WLAN client PDA or notebook into a...

Page 177: ...a encryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connecti...

Page 178: ...a al l S Se et tu up p By clicking the General Settings a new web page will appear so that you could configure the SSID and the wireless channel Please refer to the following figure for more informati...

Page 179: ...or just cannot see any thing about Vigor wireless router while site surveying The system allows you to set four sets of SSID for different usage In default the first set of SSID will be enabled You ca...

Page 180: ...ission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must suppor...

Page 181: ...configure the settings of WEP and WPA Mode There are several modes provided for you to choose Disable Turn off the encryption mechanism WEP Accepts only WEP clients and the encryption key should be en...

Page 182: ...FGHIJKLM or 26 hexadecimal digits leading by 0x such as 0x4142434445464748494A4B4C4D All wireless devices must support the same WEP encryption bit size and have the same key Four keys can be entered h...

Page 183: ...up OK Click it to save the access control list Clear All Clean all entries in the MAC address list 4 4 1 13 3 5 5 W WP PS S WPS Wi Fi Protected Setup provides easy procedure to make network connectio...

Page 184: ...eless client Then provide the PIN code of the wireless client you wish to connect to the vigor router For WPS is supported in WPA PSK or WPA2 PSK mode if you do not choose such mode in Wireless LAN Se...

Page 185: ...WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Configure via Client PinCode Please input the PIN code specified in wireless client yo...

Page 186: ...r peer AP through WDS links Yet in Bridge mode packets received from a WDS link will only be forwarded to local wired or wireless hosts In other words only Repeater mode can do WDS to WDS packet forwa...

Page 187: ...Series User s Guide 179 Click WDS from Wireless LAN menu The following page will be shown Mode Choose the mode for WDS setting Disable mode will not invoke any WDS setting Bridge mode is designed to f...

Page 188: ...you choose Repeater as the connecting mode please type in the peer MAC address in these fields Four peer MAC addresses are allowed to be entered in this page at one time Similarly if you want to invok...

Page 189: ...he AP s MAC address on the bottom of the page and click Bridge or Repeater Next click Add to Later the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page 4 4 1 13 3 7...

Page 190: ...Vigor2110 Series User s Guide 182 Refresh Click this button to refresh the status of station list Add Click this button to add current typed MAC address into Access Control...

Page 191: ...It includes LAN and WAN interface information Also you could get the current running firmware version or firmware related information from this presentation Model Name Display the model name of the r...

Page 192: ...e the VoIP phone port Profile Display the profile name for SIP account In Out Display the number for incoming outgoing phone call Wireless LAN MAC Address Display the MAC address of the wireless LAN F...

Page 193: ...ration Server you want to link Please refer to Auto Configuration Server user s manual for detailed information CPE Client It is not necessary for you to type them Such information is useful for Auto...

Page 194: ...in this filed Confirm Password Type in the new password again When you click OK the login window will appear Please use the new password to access into the web configurator again 4 4 1 14 4 4 4 C Co o...

Page 195: ...it another name by yourself 4 Click Save button the configuration will download automatically to your computer as a file named config cfg The above example is using Windows platform for demonstrating...

Page 196: ...1 14 4 5 5 S Sy ys sl lo og g M Ma ai il l A Al le er rt t SysLog function is provided for users to monitor router There is no bother to directly get into the Web Configurator of the router or borrow...

Page 197: ...name for authentication Password Type the password for authentication Enable E mail Alert Check the box to send alert message to the e mail box while the router detecting the item s you specify here...

Page 198: ...ect this option to use the browser time from the remote administrator PC host as router s system time Use Internet Time Select to inquire time information from Time Server on the Internet using assign...

Page 199: ...is enabled by default Access List You could specify that the system administrator can only login from a specific host or network defined in the list A maximum of three IPs subnet masks is allowed List...

Page 200: ...st te em m The Web Configurator may be used to restart your router Click Reboot System from System Maintenance to open the following page If you want to reboot the router using the current configurat...

Page 201: ...an example Note that this example is running over Windows OS Operating System Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www draytek com or local DrayTek...

Page 202: ...Diagnostics 4 4 1 15 5 1 1 D Di ia al l o ou ut t T Tr ri ig gg ge er r Click Diagnostics and click Dial out Trigger to open the web page The internet connection e g PPPoE PPPoA etc is triggered by a...

Page 203: ...reload the page 4 4 1 15 5 3 3 A AR RP P C Ca ac ch he e T Ta ab bl le e Click Diagnostics and click ARP Cache Table to view the content of the ARP Address Resolution Protocol cache held in the router...

Page 204: ...isplays the connection item number IP Address It displays the IP address assigned by this router for specified PC MAC Address It displays the MAC address for the specified PC that DHCP assigned IP add...

Page 205: ...econds The IP address listed here is configured in Bandwidth Management You have to enable IP bandwidth limit and IP session limit before invoke Data Flow Monitor If not a notification dialog box will...

Page 206: ...receiving speed of the monitored device Sessions Display the session number that you specified in Limit Session web page Action Block can prevent specified PC accessing into Internet within 5 minutes...

Page 207: ...to renew the graph at any time 4 4 1 15 5 8 8 P Pi in ng g D Di ia ag gn no os si is s Click Diagnostics and click Ping Diagnosis to pen the web page Ping to Use the drop down list to choose the dest...

Page 208: ...router to the host Simply type the IP address of the host in the box and click Run The result of route trace will be shown on the screen Protocol Use the drop down list to choose the interface that y...

Page 209: ...on n a an nd d E Ex xa am mp pl le es s 5 5 1 1 R Re eq qu ue es st t a a c ce er rt ti if fi ic ca at te e f fr ro om m a a C CA A s se er rv ve er r o on n W Wi in nd do ow ws s C CA A S Se er rv ve...

Page 210: ...Enter the information in the certificate request 3 Copy and save the X509 Local Certificate Requet as a text file and save it for later use 4 Connect to CA server via web browser Follow the instructi...

Page 211: ...le Select Router Offline request or IPSec Offline request below Then you have done the request and the server now issues you a certificate Select Base 64 encoded certificate and Download CA certificat...

Page 212: ...Vigor2110 Series User s Guide 204 you will find the below window showing BEGINE CERTIFICATE 6 You may review the detail information of the certificate by clicking View button...

Page 213: ...ti if fi ic ca at te e a an nd d S Se et t a as s T Tr ru us st te ed d o on n W Wi in nd do ow ws s C CA A S Se er rv ve er r 1 Use web browser connecting to the CA server that you would like to retr...

Page 214: ...d CA Certificate Click IMPORT button and browse the file to import the certificate cer file into Vigor router When finished click refresh and you will find the below illustration 4 You may review the...

Page 215: ...m draytel org Proxy draytel org Act as outbound proxy unhecked Display Name John Account Number Name 1234 Authentication ID unchecked Password Expiry Time use default value CODEC RTP DTMF Use default...

Page 216: ...piry Time use default value CODEC RTP DTMF Use default value John calls David He picks up the phone and dials 1111 DialPlan Phone Number for David Or He picks up the phone and dials 4321 David s Accou...

Page 217: ...in Realm blank Proxy blank Act as outbound proxy unchecked Display Name Arnor Account Name 1234 Authentication ID unchecked Password blank Expiry Time use default value CODEC RTP DTMF Use default valu...

Page 218: ...click Install Now under Syslog description to install the corresponding program 4 The file RTSxxx exe will be asked to copy onto your computer Remember the place of storing the execution file 5 Go to...

Page 219: ...Programs and choose Router Tools XXX Firmware Upgrade Utility 12 Type in your router IP usually 192 168 1 1 13 Click the button to the right side of Firmware file typing box Locate the files that you...

Page 220: ...Vigor2110 Series User s Guide 212 14 Click Send 15 Now the firmware update is finished...

Page 221: ...e router to factory default settings If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 6 6 1 1 C Ch he ec ck ki in n...

Page 222: ...section if the link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Windows XP As to the...

Page 223: ...atically and Obtain DNS server address automatically F Fo or r M Ma ac cO Os s 1 Double click on the current used MacOs on the desktop 2 Open the Application folder and get into Network 3 On the Netwo...

Page 224: ...Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista The DOS command dialog will appear 3 Type pi...

Page 225: ...Sometimes a wrong connection can be improved by returning to the default settings Try to reset the router by software or hardware Warning After pressing factory default setting you will loose all sett...

Page 226: ...nks rapidly please release the button Then the router will restart with the default configuration After restore the factory default setting you can configure the settings for the router again to fit y...