Draytek Vigor 2960 series, User Manual

Page 1: ......

Page 2: ...960 Series User s Guide ii Vigor2960 Dual WAN Security Firewall User s Guide Version 1 3 Firmware Version V1 0 9 For future update please visit DrayTek web site for further information Date October 29...

Page 3: ...on of the environment Warranty We warrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purc...

Page 4: ...tion against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions m...

Page 5: ...OSPF 26 3 3 How to Configure LAN to LAN IPsec Tunnel between Vigor2960 and Other Router 33 3 4 CVM Application How to manage the CPE router through Vigor2960 36 3 5 CVM Application How to build the V...

Page 6: ...6 13 Time Object 225 4 6 14 Time Group 227 4 6 15 SMS Service Object 229 4 6 16 Mail Service Object 231 4 6 17 Notification Object 234 4 7 User Management 236 4 7 1 Web Portal 236 4 7 2 User Profile...

Page 7: ...1 TR 069 378 4 15 2 Administrator Password 380 4 15 3 Configuration Backup 381 4 15 4 Syslog Mail Alert 383 4 15 5 Time and Date 386 4 15 6 Access Control 387 4 15 7 SNMP Setup 389 4 15 8 Reboot Syst...

Page 8: ...Vigor2960 Series User s Guide viii 5 6 Contacting DrayTek 416...

Page 9: ...of a point to point private link The DrayTek Vigor2960 Series VPN router supports Internet industry standards technology to provide customers with open interoperable VPN solutions such as X 509 DHCP...

Page 10: ...all General Setup Such profile must be established under CSM menu On The VPN tunnel is active VPN Off No VPN tunnel is active On The DoS DDoS function is active DoS Blinking It will blink while deleti...

Page 11: ...Vigor2960 Series User s Guide 3...

Page 12: ...and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration GigaWAN 1 2 Connect...

Page 13: ...evice also can connect to other computers to form a small area network The LAN LED for that port on the front panel will light up 3 Connect the cable Modem DSL Modem Media Converter to any WAN port of...

Page 14: ...ble for placing the router Make the screw holes on the short side of the bracket aim at the screw holes on the router Next fasten both the bracket and the router with two screws and fasten both the wa...

Page 15: ...change the password for this device you have to access into the web browse with default password first 1 Make sure your computer connects to the router correctly Notice You may either simply set up y...

Page 16: ...Password 5 Enter the login password admin in default on the field of Original Password Type a new one in the field of New Password and retype it on the field of Confirm Password Then click Apply to c...

Page 17: ...tart Wizard from the home page Quick Start Wizard will guide the user to establish LAN interface profile WAN interface profile and select proper protocol for connection The following will explain in m...

Page 18: ...a static IP address to the WAN interface and complete the configuration by applying the settings and rebooting your router Please type in values for Static IP address Static Mask Static Gateway and St...

Page 19: ...guration click Save to save the setting onto the router Previous Click it to return to previous setting page Finish Click it to finish the configuration Cancel Click it to discard the settings configu...

Page 20: ...When you finished the above settings please click Finish I If f P PP PP Po oE E i is s s se el le ec ct te ed d PPPoE stands for Point to Point Protocol over Ethernet It relies on two widely accepted...

Page 21: ...sername provided by ISP in this field Password Type in the password provided by ISP in this field Previous Click it to return to previous setting page Finish Click it to finish the configuration Cance...

Page 22: ...P Point to Point Tunneling Protocol mode please select PPTP for this router Next enter the settings provided by your ISP on the web page Available parameters are listed as follows Item Description PPT...

Page 23: ...blic gateway address for such WAN profile DNS Server IP Address To add a new IP address simply place the mouse cursor on this filed The following dialog will appear Add Click this button to display th...

Page 24: ...Vigor2960 Series User s Guide 16 When the following screen appears it means you have finished the Quick Start Wizard configuration...

Page 25: ...your router online first Log into the web configurator of Vigor2960 and click Product Registration 2 A Login page will be shown on the screen Please type the account and password that you created prev...

Page 26: ...r From this page please click Add 4 When the following page appears please type in Nick Name for the router and choose the right registration date from the popup calendar it appears when you click on...

Page 27: ...5 Now your router information has been added to the database Click OK to leave this web page and return to My Information web page 6 Take a look at the page of My Information the new added Vigor2960...

Page 28: ...Vigor2960 Series User s Guide 20 This page is left blank...

Page 29: ...og gg gi in ng g i in n R Ro ou ut te er r s s H HT TT TP PS S S Se er rv ve er r Remote Desktop Protocol RDP is a protocol designed for secure communications in networks using Microsoft Terminal Serv...

Page 30: ...d Screen Size based on the actual RDP server information then click Apply to save the settings 4 Open User Management User Profile to create a new profile named 7788 Set the Password as 7788 and choos...

Page 31: ...Vigor2960 Series User s Guide 23 7 A screen like the following figure will appear Simply click the SSL Application link 8 In the following screen click Connect for connecting to Win7 the RDP server...

Page 32: ...Vigor2960 Series User s Guide 24 9 After that you can access into Windows 7 via a browser Note the message below the window In which TLS means Transport Layer Security...

Page 33: ...roubleshooting If you have installed Java Runtime Environment edition 6 but still cannot establish the connection please make sure you have disabled Use TLS 1 0 in the Java Control Panel as figure sho...

Page 34: ...stance vector want to support much larger networks or want to have less susceptible to bad routing information you can enable OSPF feature to fit your request Note that both routers must support OSPF...

Page 35: ...90 00 0 A A 1 Open Routing General Setup to create a LAN 192 168 1 1 24 profile named lan1 with the settings shown below 2 Next continue to create a LAN 192 168 3 1 24 profile named lan2 with the sett...

Page 36: ...s 11 and lan1 area as 11 As shown in the topology diagram C Co on nf fi ig gu ur ra at ti io on n f fo or r V Vi ig go or r3 39 90 00 0 B B 1 Open LAN General Setup to create a LAN 192 168 2 1 24 prof...

Page 37: ...F Configuration to enable this profile Click Add to make the LAN Profiles lan2 area setting as 11 and lan1 area as 11 As shown in the topology diagram C Co on nf fi ig gu ur ra at ti io on n f fo or r...

Page 38: ...2960 Series User s Guide 30 2 Next continue to create a LAN 192 168 3 3 24 profile named lan2 with the settings shown below 3 Open LAN General Setup and click the Inter LAN Route tab to enable this pr...

Page 39: ...y diagram 5 After setting check the routing information marked with red line which is created by OSPF R Ro ou ut ti in ng g i in nf fo or rm ma at ti io on n f fo or r V Vi ig go or r3 39 90 00 0 A A...

Page 40: ...Vigor2960 Series User s Guide 32...

Page 41: ...established between Vigor2960 and Vigor2710 C Co on nf fi ig gu ur ri in ng g V Vi ig go or r2 29 96 60 0 1 Access into the web configurator of Vigor2960 and open VPN and Remote Access VPN Profiles to...

Page 42: ...0 and open VPN and Remote Access LAN to LAN First please type the name of such VPN connection in the field of Profile Name e g 2960 Check the box of Enable this profile Choose Dial Out as Call Directi...

Page 43: ...k IP and Remote Network Mask of Vigor2960 to complete configuration 4 Please check if the VPN connection is built successfully in both devices respectively For Vigor2960 open VPN and Remote Access IPs...

Page 44: ...igor2830 series as the example The firmware upgrade for the CPE can be done through Vigor2830 series 3 3 4 4 1 1 C Co on nf fi ig gu ur re e S Se et tt ti in ng gs s o on n V Vi ig go or r2 29 96 60 0...

Page 45: ...e g Vigor2830 series and get ready to access into the web user interface of the CPE 2 Open a web browser for example IE Mozilla Firefox or Netscape on your computer and type http 192 168 1 1 3 Please...

Page 46: ...In nv vo ok ke e R Re em mo ot te e M Ma an na ag ge em me en nt t f fo or r C CP PE E 1 Login the web user interface of the CPE 2 Open System Maintenance Management Setup 3 Check Allow management fro...

Page 47: ...se the drop down list of Access Mode on WAN1 to select MPoA RFC1483 2684 Then click Details Page 3 Click Specify an IP address Type correct WAN IP address subnet mask and gateway IP address for your C...

Page 48: ...h he ec ck k C CP PE E M Ma ai in nt te en na an nc ce e P Pa ag ge e 1 Return to the web user interface of Vigor2960 2 Open Central VPN Management CPE Management 3 Now there is one CPE managed Vigor2...

Page 49: ...d d V Vi ig go or r2 29 96 60 0 When a remote device is managed by Vigor2960 series it is easy to build VPN between these two devices 1 Access into the web user interface of Vigor2960 series 2 Open Ce...

Page 50: ...open the following page for specified the CPE you want Click Connect after finished the settings 4 A confirmation dialog will appear Click OK and wait for a moment 5 If VPN is built successfully relat...

Page 51: ...VPN will be generated automatically You can access into VPN and Remote Access LAN to LAN of the remote device for viewing the detailed information Note The profile name is created automatically by th...

Page 52: ...yo ou ur r P PC C t to o V Vi ig go or r2 29 96 60 0 1 Suppose the newest firmware file is located on your PC You can upload it from your PC to Vigor2960 2 Log into the web user interface of Vigor2960...

Page 53: ...Vigor2960 Series User s Guide 45 6 In the Upload dialog click the Browse button to find out the firmware e g 2830_0508 in this case you want to upload from PC to Vigor2960 Then click Upload...

Page 54: ...Vigor2960 Series User s Guide 46 7 When the file is uploaded successfully later you will find the one in the File Explorer dialog...

Page 55: ...ofile cannot be created successfully 1 Open Central VPN Management CPE Management Click CPE Maintenance In the Maintenance area click Add 2 In the following dialog type the name for the new profile sp...

Page 56: ...s been created and displayed on the Maintenance area 4 Now the new firmware will be loaded into the CPE immediately based on the schedule setting now Note that a red icon will appear during the period...

Page 57: ...hed is displayed it means the firmware upgrade of specified CPE has completed 3 3 6 6 3 3 C Ch he ec ck k t th he e D De ev vi ic ce e I In nf fo or rm ma at ti io on n 1 Open Central VPN Management C...

Page 58: ...the network administrator can set another Vigor2960 s as the backup device s to deliver full routing services during the shutdown of the main Vigor2960 The network administrator can use a Virtual IP e...

Page 59: ...h Availability 3 In the tab of High Availability Global Setup choose Hot Standby as Redundant Method choose Primary as Config Synchronization Rule type draytek as Authentication Key choose Immediate a...

Page 60: ...ccess into the web user interface of Vigor2960 2 Open Applications High Availability 3 In the tab of High Availability Global Setup choose Hot Standby as Redundant Method choose Secondary as Config Sy...

Page 61: ...0 Series User s Guide 53 4 Click the High Availability Profile Setup tab to create HA profile s Click Add 5 Create an HA profile Refer to the following figures Type the lan1 IP address configured in R...

Page 62: ...ry before router B Secondary Simply open Applications High Availability and click the High Availability Global Setup Locate Enable High Availability Check the box and click Apply to save the settings...

Page 63: ...in to reduce the loading of the network traffic WAN1 IP Address 1 1 1 1 WAN2 IP Address 2 2 2 2 Inbound Load Balance allows Vigor2960 acting as a DNS Server to separate the traffic for each WAN interf...

Page 64: ...e Click Add 3 Add a profile named yourdomain com Define WAN1 weights 1 and WAN2 weights 2 It means the total DNS query time will be three one will pass through WAN1 two will pass through WAN2 4 Click...

Page 65: ...rver google public dns a google com Address 8 8 8 8 Name www yourdomain com Address 1 1 1 1 Second DNS query www yourdomain com Server google public dns a google com Address 8 8 8 8 Name www yourdomai...

Page 66: ...Vigor2960 Series User s Guide 58 This page is left blank...

Page 67: ...llowing ranges From 10 0 0 0 to 10 255 255 255 From 172 16 0 0 to 172 31 255 255 From 192 168 0 0 to 192 168 255 255 W Wh ha at t a ar re e P Pu ub bl li ic c I IP P A Ad dd dr re es ss s a an nd d P...

Page 68: ...WAN function It allows users to access Internet and combine the bandwidth of the WAN profiles to speed up the transmission through the network Each WAN port can connect to different ISPs even if the...

Page 69: ...rmines a WAN interface can be set with single or double VLAN ID values Normal It means only one VLAN ID value can be configured for the WAN interface Double Tag It means two VLAN ID values 802 1q in q...

Page 70: ...ode go to Step 4 directly 2 A confirmation dialog will appear Click OK to apply the related settings for Advance mode 3 Re login the system 4 Open WAN General Setup Click the Add button to open the fo...

Page 71: ...for you to specify for IPv4 protocol type Each mode will bring up different web page Mode Determine such profile will be used for NAT or routing IPv6 Protocol There are five connection modes for you...

Page 72: ...er for such VLAN The range is from 0 to 7 Apply Click it to save the configuration and exit the dialog Cancel Click it to exit the dialog without saving the configuration Global configuration allows y...

Page 73: ...P address specified for such profile Subnet Mask Use the drop down list to choose the subnet mask for such profile Gateway IP Address Type a public gateway address for such WAN profile DNS Server IP A...

Page 74: ...etection Mode Select a detecting mode for this WAN interface There are three ways ARP PING and HTTP supported in Vigor router for you to choose to send the request out Connection Detection Host Assign...

Page 75: ...IPv4 protocol type click the DHCP Tab to open the following page Available parameters are listed as follows Item Description Host Name Optional Type a name as the host name for identification IP Alias...

Page 76: ...of time for each detecting Connection Detection Retry Assign detecting times to ensure the connection of the WAN interface After passing the times you set in this field and no reply received by the r...

Page 77: ...ck Enable to display the PPPoE debug message in Syslog The default setting is Disable Always On Enable Click it to enable the function of Always On The router will keep network connection all the time...

Page 78: ...l period of time for each detecting Connection Detection Retry Assign detecting times to ensure the connection of the WAN interface After passing the times you set in this field and no reply received...

Page 79: ...u connect to it and request In some case your ISP provides service to always assign you the same IP address whenever you request In this case you can fill in this IP address in the Fixed IP field Plea...

Page 80: ...tion Interval Assign an interval period of time for each detecting Connection Detection Retry Assign detecting times to ensure the connection of the WAN interface After passing the times you set in th...

Page 81: ...uch protocol IPv6 Prefix Length Type your IPv6 address prefix length IPv6 Gateway Address Type your IPv6 gateway address IPv6 DNS Server Address Type your IPv6 primary DNS Server address Add Click thi...

Page 82: ...A_NA mode DHCP IA_NA DNS Address Add Click this button to type primary DNS server address for IPv6 Save Click this button to save the setting Apply Click it to save the configuration and exit the dial...

Page 83: ...elect the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Refresh Renew current web page Profile Display...

Page 84: ...SB WAN profile Enable Check it to enable the USB WAN profile Description Give the brief description for such profile Port Display the physical WAN interface for such profile Protocol Choose the connec...

Page 85: ...pe PIN code of the SIM card that will be used to access Internet Modem Initial String 1 Such value is used to initialize USB modem Please use the default value If you have any question please contact...

Page 86: ...assword optional 4G DHCP SIM Pin code Type PIN code of the SIM card that will be used to access Internet Network Mode Force Vigor router to connect Internet with the mode specified here If you choose...

Page 87: ...cted USB WAN profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule...

Page 88: ...the drop down list to choose the WAN interface LAN VLAN Member Choose a VLAN profile from the drop down list You have to open LAN Switch page and click 802 1Q VLAN for creating VLAN ID number bound w...

Page 89: ...Load Balance and click the Inbound Load Balance tab Each item will be explained as follows Item Description Enable Check the box the enable inbound load balance function Add Add a new WAN profile for...

Page 90: ...Display the weight s that WAN interface s used Alias Interface Display the WAN interfaces used by the IP alias IP Display the alias IP settings used by the profile Alias Weight Display the weight that...

Page 91: ...Use the drop down list to choose a WAN interface profile which will be used by the domain Weight Use the drop down list to choose the one you want Alias Setting The purpose of such setting is to speci...

Page 92: ...hen such time setting has expired Negative Cache TTL Set the negative caching time name error Email Type the e mail address of the administrator NS Record This page is used to specify name server whic...

Page 93: ...ave Click it to save the settings Host Set a domain name IPv6 Address Type the IPv6 address of the host Any query concerning of Host will be forwarded to the server selected in Reference for advanced...

Page 94: ...ries User s Guide 86 4 4 1 1 3 3 S Sw wi it tc ch h This page allows you to configure Mirroring Port Mirrored Port enable disable WAN interface and configure 802 1Q VLAN ID for different WAN interface...

Page 95: ...to the VLAN ID setting configured here This page simply displays current status of 802 1Q VALN setting profiles Each item will be explained as follows Item Description Refresh Click it to reload this...

Page 96: ...ubles on Network Available parameters are listed as follows Item Description Enable This Profile Check the box to enable the Mirror function for the switch Mirroring Port Select a port for the adminis...

Page 97: ...ectively Each item will be explained as follows Item Description Edit Choose the interface listed below and click the Edit button to modify the settings A pop up window will appear for you to change t...

Page 98: ...most generic function of Vigor router is NAT It creates a private subnet of your own As mentioned previously the router will talk to other public hosts on the Internet by using public IP address and...

Page 99: ...ew LAN profile Edit Modify the selected LAN profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding...

Page 100: ...dialog Different protocol type selected will bring up different configuration web page Available parameters are listed as follows Item Description Profile max length 7 Type the name of the LAN profile...

Page 101: ...End IP Type an IP address as the ending point for DHCO server DHCP DNS Set the private IP address for DNS server If this field is blank users on LAN will treat Vigor2960 as the DNS server Add Click i...

Page 102: ...subnet mask with IP address and specified mode Save Click it to save the settings IP Type the IP address if you click Add for adding a new entry Subnet Mask Use the drop down list to choose the one y...

Page 103: ...n IPv6 address from server IPv6 Address If Static is chosen as IPv6 Protocol please type the IPv6 address in this field IPv6 Prefix Length Display the IPv6 prefix length DHCPv6 SLA WAN Interface If DH...

Page 104: ...ecified location This page allows users to specify which subnet that DHCP server is located that the relay agent should redirect the DHCP request to Each item will be explained as follows Item Descrip...

Page 105: ...d as follows Item Description Profile Display the name of the LAN profile Enable Check this box to enable this profile DHCP Server Location Choose the interface for the DHCP server DHCP Server IP Type...

Page 106: ...960 Series User s Guide 98 4 4 2 2 1 1 3 3 I In nt te er r L LA AN N R Ro ou ut te e To make the users in different LAN communicating with each other please check the box to enable Inter LAN route fun...

Page 107: ...a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Refresh Renew current web p...

Page 108: ...Check this box to enable this profile Advertisement Lifetime Type a value for advertisement lifetime The lifetime associated with the default router in units of minutes ranging from 10 150 It is used...

Page 109: ...Profile Display the name of the LAN profile Enable Display the status of the profile False means disabled True means enabled Mode Display the mode automatic setting or manual setting specified for su...

Page 110: ...Start IP address and End IP address manually Start IP Set the starting IP address of the IP address pool for DHCP server The format the IP address shall be similar to the following example 2000 0000 0...

Page 111: ...N profile has been edited 4 4 2 2 2 2 P PP PP Po oE E S Se er rv ve er r This feature makes the router working like an ISP providing PPPoE connections to LAN PCs The only difference is that local PCs...

Page 112: ...ion Auto Refresh Specify the interval of refresh time to obtain the latest status The information will update immediately when the Refresh button is clicked Refresh Renew current web page MAC Address...

Page 113: ...ter Deny Internet Access Except PPPoE User Disable Click it to disable this function Enable If you click Enable only the PPPoE user can access into Internet Access Concentrator AC Name Type the name w...

Page 114: ...wn list to specify the LDAP profile DHCP From It is available when RADIUS is selected as User Authentication Type DHCP Relay Enable If you want to use another DHCP server in the network other than the...

Page 115: ...h router Each item will be explained as follows Item Description User Name Display the user name used to access into the PPPoE server Action Display the connection status up or down of the user accoun...

Page 116: ...N for its Engineering Department another for its Marketing Department and another for its guest who can only use Internet not Intranet VLANs can also be set up according to the organization structure...

Page 117: ...2 1Q VLAN tab 2 Click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description VLAN ID Type the number as the VLAN ID Type a number used for identi...

Page 118: ...rfaces This mechanism helps manager track the network errors or abnormal packets transmission without interrupting the flow of data access the network By the way user can apply this function to monito...

Page 119: ...disable speed Auto 10M 100M 1000M and duplex Half Full for the LAN ports respectively Each item will be explained as follows Item Description Edit Choose the interface listed below and click the Edit...

Page 120: ...ng dialog will appear Available parameters are listed as follows Item Description Interface Display the name of LAN interface profile Enable Check the box to enable the Mirror function for the switch...

Page 121: ...ansmit Unit determines the largest size of a packet When a packet with large size is transmitted through Vigor router the router will cut it into several segments to facilitate the transmission It alw...

Page 122: ...for IP and MAC will be displayed in this field Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Move on IP Bind List Mode Enable Choose it to i...

Page 123: ...by other Vigor router Thus it is not necessary for that router to create Bind IP to MAC one by one Import Click it to import an IP bind to MAC information e g 123 txt obtained from other Vigor router...

Page 124: ...ng dialog appears Available parameters are listed as follows Item Description Profile Type the name of the profile IP Address Type the IP address that will be used for the specified MAC address MAC Ty...

Page 125: ...able 4 4 2 2 5 5 L LA AN N D DN NS S LAN DNS is a simple version of DNS server It is not necessary for the user to build another DNS server in LAN With such feature the user can configure some service...

Page 126: ...d VLAN ID setting To delete a VLAN ID setting simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number of the p...

Page 127: ...Domain Name Type several domain names in this field LAN DNS will redirect both Domain name and CNAME to an assigned IP For example Domain Name is set with www draytek com and the CNAME is set as www d...

Page 128: ...net of hosts and port range to be allocated in WAN interface User can assign traffic category and force it to go to dedicate network interface based on the following web page setup In the Routing grou...

Page 129: ...tocol of such rule Interface Display the name of the WAN profiles for Load Balance rule Primary Profile Display the primary profile configured in Failover page for such profile Backup Profile Display...

Page 130: ...such profile e g LB_1 Choose Load Balance as the Mode selection Available parameters are listed as follows Item Description Profile Type the name of the profile Mode Choose Load Balance as the Mode se...

Page 131: ...dialog Type a name for such profile e g FL_1 Choose Failover as the Mode selection Available parameters are listed as follows Item Description Profile Type the name of the profile Mode Choose Failover...

Page 132: ...route setting To edit static route setting simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected...

Page 133: ...Description Profile Type the name of the static route profile Enable Check this box to enable such profile Destination IP Address Type the IP address for such static route profile Subnet Mask Use the...

Page 134: ...ponding settings for the selected rule Delete Remove the selected static route setting To delete a static route setting simply select the one you want to delete and click the Delete button Refresh Ren...

Page 135: ...thop Type the nexthop address for such static route profile WAN LAN Profile Choose one of the LAN WAN profiles of the gateway for such static route Metric Type the distance to the target usually count...

Page 136: ...responding settings for the selected rule Delete Remove the selected static route setting To delete a static route setting simply select the one you want to delete and click the Delete button Rename A...

Page 137: ...le Type the name of the static route profile Enable Check this box to enable such profile WAN Profile Choose one of the WAN USB profiles of the gateway for such profile LAN Profile Choose one of the L...

Page 138: ...load balance to reduce the loading of the network traffic You have to manually create policy rules in order to force the traffic going to dedicate network interface Strict Bind Through dedicated inte...

Page 139: ...ed Refresh Renew current web page Profile Display the name of the rule Enable Display the status of the profile False means disabled True means enabled Protocol Display the protocol of such rule Sourc...

Page 140: ...The following dialog will appear Available parameters are listed as follows Item Description Profile Type the name of the rule Enable Check this box to enable such profile Protocol Choose a protocol A...

Page 141: ...P group s for such rule profile Source Port Begin Specify a number as the starting value in the source port range from 1 to 65535 for such rule Source Port End Specify a number as the ending value in...

Page 142: ...efined gateway VPN Trunk LB Pool The incoming traffic will be forwarded to specified VPN trunk profile PPTP The incoming traffic will be forwarded to specified PPTP VPN profile When Load Balance Pool...

Page 143: ...next matched policy route rule to perform data transmission automatically Click Enable to enable such function Or click Disable to disable such function Failback Quick Recover When the specified inte...

Page 144: ...erform data transmission automatically Click Enable to enable such function Or click Disable to disable such function Failback Quick Recover When the specified interface re connects the traffic via ot...

Page 145: ...he WAN side or the Internet the source address of the NAT host will be mapped into either 202 211 100 10 or 203 98 200 10 which IP or mapping is decided by the internal load balancing algorithm With a...

Page 146: ...ose Static as the IPv4 Protocol 3 From the following page set main WAN IP address as 202 211 100 10 Click Add on IP Alias to configure the other IP address which is 202 211 100 11 4 After finished con...

Page 147: ...e 139 5 Open Objects Setting Object and click Add to create a new IP object profile Type the required information as shown below Click Apply to save the settings 6 Open Routing Policy Route and click...

Page 148: ...Type and choose IP range object profile from the drop down list of IP Object Click Apply to save the settings And 8 Upon completing the above configuration you have specified the outgoing IP address...

Page 149: ...n ng g P Po ol li ic cy y R Ro ou ut te e The following figure shows a simple application of load balance WAN1 and WAN2 can be used to access into Internet The PC in LAN1 can send the data to the remo...

Page 150: ...ype 203 65 1 35 as IP address choose Load Balance Pool as Out going Rule choose WAN1 as the Load Balance Rule click Disable for Failover to Next Rule 4 After finished the above settings click Apply to...

Page 151: ...c ch h b by y U Us si in ng g P Po ol li ic cy y R Ro ou ut te e A LAN to LAN VPN tunnel is built between DrayTek VPN router e g Vigor2960 and the remote router Enterprise firewall router in Headquart...

Page 152: ...e Subnet as Source Type and type the source IP address with 172 16 3 25 choose User Defined as Out going Rule choose lan1 as the Out going Interface type 192 168 1 2 as the Out going Gateway and click...

Page 153: ...ption WAN Profile Load Balance Pool Name Display the WAN profiles for user to choose as a default route In which wan1 to wan2 are factory default settings Auto Failover to Active WANs Enable Check it...

Page 154: ...no obstruction on the network routine In addition it will choose a correct route based on the method of Distance Vector Routing and use the Bellman Ford algorithm to calculate the routing table RIP c...

Page 155: ...lows Item Description Enable Check the box to enable the Mirror function for the switch Profile Choose the LAN WAN profile s Apply Click it to save the settings Cancel Click it to exit the dialog with...

Page 156: ...ter convergence than distance vector want to support much larger networks or want to have less susceptible to bad routing information you can enable OSPF feature to fit your request Note that both rou...

Page 157: ...Open Routing OSPF Configuration 2 Check Enable 3 Click the space of Profile A pop up dialog will appear Click Add 4 Use the drop down list of LAN Profile to choose the one you need And specify the val...

Page 158: ...g information for each other A BGP router is the neighbor of other BGP routers Define the IP address AS number for the router is essential for TCP connection of BGP routing information exchange AS the...

Page 159: ...or Display the neighbor profile name configured successfully in the Neighbor tab in Routing BGP configuration Neighbor IP Display the neighbor IP address configured successfully in the Neighbor tab in...

Page 160: ...er Type the autonomous system number for the host in BGP application Static Networks Define the IP addresses forming network range which allow to be connected by other clients through static route Add...

Page 161: ...t Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the sele...

Page 162: ...lick the Neighbor tab 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Profile Type the name of the profile Enable Check the...

Page 163: ...P address so that local hosts can communicate with the router and access the Internet 4 4 4 4 1 1 P Po or rt t R Re ed di ir re ec ct ti io on n Port Redirection means port forwarding It may be used t...

Page 164: ...name Before using such function there is one profile existed at least Refresh Renew current web page Profile Display the name of the profile Enable Display the status of the profile False means disabl...

Page 165: ...T Port Redirection 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Profile Type the name of the profile Enable Check the bo...

Page 166: ...nd It is available when Range to One or Range to Range port or Range to Range IP is selected as Port Redirection Mode Type the starting ending number of the public port For Range to One set both Start...

Page 167: ...ever the DMZ host is not able to initiate a session back into the private network It can only forward packets that have already been requested Users of the public network outside the company can acces...

Page 168: ...the WAN profile that such DMZ host profile will be applied to IP Alias Display the selected WAN IP address if Use IP Alias is enabled DMZ Host IP Display the IP address of the DMZ host Allow DMZ Host...

Page 169: ...ddress of the DMZ host Allow DMZ Host to Access Network Click Enable to make DMS host accessing network Allowed IP Object This is an optional setting Use the drop down list to choose the IP object pro...

Page 170: ...way This page allows make SIP message and RTP packets of voice being transmitting and receiving correctly via NAT by Vigor router Available parameters are listed as follows Item Description Enable SIP...

Page 171: ...2960 Series User s Guide 163 4 4 4 4 3 3 2 2 H H 3 32 23 3 A AL LG G The H 323 ALG allows incoming and outgoing VoIP calls passing through NAT If required check the box and click Apply to save the set...

Page 172: ...n The following sections will explain how to configure the Firewall Users can select IP Filter DoS Defense MAC Block and Port Block options from Firewall menu The DoS Defense facility can detect and m...

Page 173: ...order of selected profile by moving it down Profile Number Limit Display the total number of the profiles to be created Group Display the name of the IP filter group profile Enable Display the status...

Page 174: ...ing 4 Enter all of the settings and click Apply 5 A new filter group has been added 6 You can create filter rule by clicking on the left side of the selected IP filter group profile A setting page wil...

Page 175: ...g the rule will be passed immediately Block If No Further Match A packet matching the rule and that does not match further rules will be dropped Accept If No Further Match A packet matching the rule a...

Page 176: ...e selection box Choose one or more service type group profiles from the drop down list The selected profile will be treated as service type You can click to create another new service type group profi...

Page 177: ...s destination target You can click to create another new IP object profile Destination IP Group Click the triangle icon to display the profile selection box Choose one or more IP group profiles from t...

Page 178: ...Cancel Click it to exit the dialog without saving anything 9 Enter all of the settings and click Apply 10 A new IP filter rule has been added under the IP Filter Group named IPF_Market in this case N...

Page 179: ...you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew c...

Page 180: ...er tab 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Group Type the name of the IP filter group Enable Check the box to e...

Page 181: ...User s Guide 173 6 You can create filter rule by clicking on the left side of the selected IP filter group profile A setting page will appear for you to add new IP filter rule profile 7 Move your mou...

Page 182: ...be dropped immediately Accept Packets matching the rule will be passed immediately Block If No Further Match A packet matching the rule and that does not match further rules will be dropped Accept If...

Page 183: ...o create another new service type object profile Service Type Group Click the triangle icon to display the profile selection box Choose one or more service type group profiles from the drop down list...

Page 184: ...Vigor2960 Series User s Guide 176 Note You can create multiple IPv6 filter rules under a certain IP Filter group...

Page 185: ...one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule sim...

Page 186: ...pplication profile H Ho ow w t to o c cr re ea at te e a an n A Ap pp pl li ic ca at ti io on n F Fi il lt te er r p pr ro of fi il le e 1 Open Firewall Filter Setup and click the Application Filter t...

Page 187: ...IP group profiles from the drop down list The selected profile will be filtered by the router when such application filter profile is applied You can click to create another new IP group profile or yo...

Page 188: ...down list which will be allowed not be allowed to pass through the router You can click to create another new APP object profile or you can click the edit icon to modify the existed object profile Ap...

Page 189: ...cription Add Add a new group profile for URL filter Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear fo...

Page 190: ...the keyword object profile selected for each rule which is allowed to pass through the router Keyword Block Display the keyword object profile selected for each rule which is not allowed to pass thro...

Page 191: ...f fi il le e 1 Open Firewall Filter Setup and click the URL Web Category Filter tab 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Des...

Page 192: ...the profile selection box Choose one or more IP group profiles from the drop down list The selected profile will be filtered by the router when such URL filter profile is applied You can click to crea...

Page 193: ...other new keyword object profile or you can click the edit icon to modify the existed object profile Web Category Policy Click the triangle icon to display the profile selection box Choose one or more...

Page 194: ...lete a rule simply select the one you want to delete and click the Delete button Move Up Change the order of selected profile by moving it up Move Down Change the order of selected profile by moving i...

Page 195: ...Description Profile Type the name of the QQ filter profile Enable Check the box to enable this profile Time Profile Use the drop down list to specify a time profile for such profile You can click to c...

Page 196: ...Category Filter and QQ Filter are not suitable for the incoming packets Available parameters are listed as follows Item Description Use Default Policy Pass All of the incoming packets can pass throug...

Page 197: ...Description Firewall Filter Setup IP Filter Application Filter Apply Click it to save the configuration Cancel Click it to discard the settings configured in this page After finished the above setting...

Page 198: ...nicast Storm Defense Click Enable to block the packets attacks coming from unknown unicast storm Unknown Multicast Storm Defense Click Enable to block the packets attacks coming from unknown multicast...

Page 199: ...shold value the router will discard the subsequent echo requests within the user defined timeout period ICMP Flood Threshold The default setting for threshold is 500 packets per second ICMP Flood Time...

Page 200: ...Fraggle Click Enable to activate the Block fraggle Attack function Any broadcast UDP packets received from the Internet are blocked Block Tear Drop Click Enable to activate the Block Tear Drop functio...

Page 201: ...selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule De...

Page 202: ...listed as follows Item Description Profile Type the name which can briefly describe the reason of the MAC block of such profile Enable Check the box to enable this profile MAC Address Type the MAC ad...

Page 203: ...lows users to set different filter profiles based on IP service type keyword file extension instant message application P2P application protocol application web category QQ application time setting SM...

Page 204: ...Add a new profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding...

Page 205: ...llows Item Description Profile Type the name of such profile Address Type Choose the address type Single Range Subnet for such profile Start IP Address Type the IP address of the starting point for su...

Page 206: ...t the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rul...

Page 207: ...ers allowed to be typed here is 20 Description Make a brief explanation for such profile if the group name is set not clearly Objects Use the drop down list to check the IP object profiles under such...

Page 208: ...the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display...

Page 209: ...es Subnet Allow to specify subnet mask Address Pool This field allows you to type IP address specify Tag number and type subnet mask based on IPv6 protocol Tag is an optional field only used for user...

Page 210: ...imply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To d...

Page 211: ...Type a name for such profile Countries Check the box es for the country countries to be blocked by Firewall Apply Click it to save the configuration Cancel Click it to exit the dialog without saving...

Page 212: ...The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click t...

Page 213: ...Start It is available for TCP UDP protocol It can be ignored for ICMP Type a port number 0 65535 as the starting source port Source Port End It is available for TCP UDP protocol It can be ignored for...

Page 214: ...to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the...

Page 215: ...characters allowed to be typed here is 20 Objects Use the drop down list to check the service type object profiles under such group All the available service type objects that you have added on Objec...

Page 216: ...s Item Description Add Add a new profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to mo...

Page 217: ...such profile For example type gambling as Contents When you browse the webpage the page with gambling information will be watched out and be passed blocked based on the configuration on Firewall sett...

Page 218: ...ve the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 100 of the ob...

Page 219: ...tting Apply Click it to save the configuration Cancel Click it to exit the dialog without saving the configuration 4 Enter all of the settings and click Apply 5 A new DNS Object profile has been creat...

Page 220: ...object profiles to be created Profile Display the name of the profile Image Display the selected file extension of image Video Display the selected file extension of video Audio Display the selected...

Page 221: ...box es to select the file extension you need Java Several file extensions for Java offered for you to choose Use the drop down list to check the box es to select the file extension you need ActiveX Se...

Page 222: ...odify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one...

Page 223: ...u to choose to block Choose the one s you want to block and save as an IM Object profile Later it can be applied to Firewall as a filter rule and reach the purpose of block Available parameters are li...

Page 224: ...Item Description Other P2P Applications Several P2P applications offered for you to choose Check the one s you want to add for such profile Click Protocol to get the following page Network services e...

Page 225: ...following page Item Description Tunneling Streamin g Remote Control Web HD Several protocols offered for you to choose Check the one s you want to add for such profile 4 Enter all of the settings and...

Page 226: ...s to experiment If you want to purchase a formal edition simply contact with your DrayTek dealer Note 1 Web Content Filter WCF is not a built in service of Vigor router but a service powered by Commto...

Page 227: ...the items under certain category that you choose to block Business Display the items under certain category that you choose to block Chatting Display the items under certain category that you choose...

Page 228: ...one s that you don t want the user to visit Chatting Simply check the one s that you don t want the user to use for gossip with remote people Computer Simply check the one s that you don t want the u...

Page 229: ...profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings f...

Page 230: ...ype the name of the QQ object profile The number of the characters allowed to be typed here is 10 id Create the account name for such QQ object profile Add Click this button to add a new account Save...

Page 231: ...or the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Displa...

Page 232: ...p name is set not clearly Objects Use the drop down list to select the object profiles under such group All the available objects that you have added on Objects Setting QQ Object will be seen here To...

Page 233: ...fy the corresponding settings for the selected rule Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web p...

Page 234: ...Profile Type the name of the time object profile The number of the characters allowed to be typed here is 10 Frequency Specify how often Weekdays or Once the schedule will be applied Start Date Specif...

Page 235: ...file Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for...

Page 236: ...p The number of the characters allowed to be typed here is 10 Description Make a brief explanation for such profile if the group name is set not clearly Objects Use the drop down list to check the tim...

Page 237: ...lected profile Delete Remove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the...

Page 238: ...Use the drop down list to specify the service provider which offers SMS service Username Type a user name that the sender can use to register to selected SMS provider The maximum length of the name y...

Page 239: ...ed profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected profile Delete...

Page 240: ...a a n ne ew w m ma ai il l s se er rv vi ic ce e p pr ro of fi il le e 1 Open Objects Setting Mail Service Object 2 Simply click the Add button 3 The following dialog will appear Available parameters...

Page 241: ...r Name Type a name for authentication The maximum length of the name you can set is 31 characters User Password Type a password for authentication The maximum length of the password you can set is 31...

Page 242: ...emove the selected profile To delete a rule simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 8 of the o...

Page 243: ...on happened to WAN interface the router system will send the alert message to the recipient VPN Disconnection Enable When disconnection happened to a VPN tunnel the router system will send the alert m...

Page 244: ...web portal mechanism and then be managed for functions like firewall or load balance This page can determine the general rule for the users controlled by User Management The mode selected in this page...

Page 245: ...960 IP Display the IP address of the user who logs into the WUI of Vigor2960 Allow Time Display the total network connection time allowed for the log in user Start Time Display the starting time of th...

Page 246: ...ation Type This option is available when the Login Mode is set as HTTP or HTTPS Note that the authentication sequence adopted by the system will be Local first Guest second RADIUS third and LDAP the l...

Page 247: ...equested After passed the authentication made by Vigor router the user will be redirected to original requested web page Bulletin If it is selected users will be forced to see the information displaye...

Page 248: ...lained as follows Item Description Welcome Message Type words or sentences here The message will be displayed on the top of the login page Bulletin Message The bulletin message is shown on login page...

Page 249: ...r P Pr ro of fi il le e This function allows to configure all accounts user profiles in Vigor2960 including PPTP L2TP System user and so on 4 4 7 7 2 2 1 1 U Us se er r P Pr ro of fi il le e User prof...

Page 250: ...remaining time quota of the user on the fly will not log out online users PPTP Dial in Display the status of PPTP connection for such user profile L2TP Dial in Display the status of L2TP connection fo...

Page 251: ...en the user passes the authentication he she can access Internet via this router However the accessing operation will be restricted with the conditions configured in this user profile Enable Check thi...

Page 252: ...ble Click it to disable the function Set Time Quota min Type the time value Remaining Time Display the remaining time for the user profile Note The range of Time Quota is 1 14400 minutes Max Simultane...

Page 253: ...P for applying into this profile To clear the selected one click to remove current object selections PPPoE Server Allow PPPoE Server Login Click Enable to activate related PPPoE configuration Quota Re...

Page 254: ...ly type the MAC address of the router in this field FTP User Setting Allow FTP Server Login Click Enable to allow the remote user accessing into Internet via FTP server Apply Click it to save the conf...

Page 255: ...he box to configure detailed setting Enable Click it to enable the time quota function for all user profiles Modify Time Quota Value Check the box to configure detailed setting You have to check this...

Page 256: ...setting Enable Click it to enable the mOTP function all user profiles Modify PPPoE Server Login Check the box to configure detailed setting Enable Click it to enable the PPPoE authentication function...

Page 257: ...at most 255 user accounts at a time Account Manually Auto generated with regularity Password Distinct password created by Administrator Randomly generated and the length is defined by Administrator Ma...

Page 258: ...ress Type and type 192 168 1 11 as Start IP Address Click Apply to save the settings 5 Open User Management Guest Profile and click the Mass Guest Generator tab to open the following page Type the Gro...

Page 259: ...anagement Guest Profile and click Guest Group to check the Mass User account Group By clicking each account e g choose 1001 and click Edit we can check the information for this account and we may also...

Page 260: ...or2960 Series User s Guide 252 Note that Administrator is able to Export the information for the whole group to a csv file which is useful to redistribute the account and password combinations to gues...

Page 261: ...age Check Local and Guest as Authentication Type Check IP object named of Boss to put it into the white list and this will allow this IP address to access to the Internet without authentication 8 Afte...

Page 262: ...net For Room guest to access into Internet 4 4 7 7 3 3 U Us se er r G Gr ro ou up p The User Group can consist of several user profiles which help the administrator to manage a large number of users c...

Page 263: ...reated Usergroup Display the name of the user group Enable Display the status of the profile False means disabled True means enabled Member Display the user profiles under such group H Ho ow w t to o...

Page 264: ...as follows Item Description Add Add a new profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit window will appear for...

Page 265: ...Item Description Group Type the name of such profile Enable Check this box to enable such profile Comment Give a brief description for the profile Usage Period It determines the usage time for the gu...

Page 266: ...the settings and click Apply 5 A new guest group profile has been created 6 You can create several guest names by clicking on the left side of the selected guest group profile A setting page will app...

Page 267: ...Give a brief description for the guest Apply to Web Portal Enable Click it to make such profile being applied to web portal Disable Click it to disable the option Clean Deadline The guest profile can...

Page 268: ...art Index Type a number which will be treated as the starting number for generating mass guest profiles Note The range of Start index is 1 10000 Number to Generate Type the total number of guests to b...

Page 269: ...ytime outside the valid period Click Enable to enable such option Start Time End Time Specify the valid period by typing the time with the format of YYYY MM DD MM Apply Click it to save the configurat...

Page 270: ...ed remote access authentication for network management Available parameters are listed as follows Item Description Enable Check this box to enable such profile Server IP Address Enter the IP address o...

Page 271: ...ory and acquire the data in the directory securely therefore users can apply LDAP to search or list the directory object inquire or manage the active directory Available parameters are listed as follo...

Page 272: ...Regular DN Display the configured regular DN if Bind Type is set with Regular Mode Regular Password Display the configured regular password if Bind Type is set with Regular Mode H Ho ow w t to o c cr...

Page 273: ...r Common Name Identifier Type or edit the common name identifier for the LDAP server The common name identifier for most LDAP server is cn Base DN It means Base Distinguished Name Type the distinguish...

Page 274: ...amic DNS server Once the router is online you will be able to use the registered domain name to access the router or internal virtual servers from the Internet It is particularly helpful if you host a...

Page 275: ...lows Item Description Auto Refresh Specify the interval of refresh time to obtain the latest status The information will update immediately when the Refresh button is clicked Refresh Renew current web...

Page 276: ...DNS server immediately Refresh Renew current web page Profile Display the name of the profile Enable Display the status of the profile False means disabled True means enabled WAN Profile Display curre...

Page 277: ...Edit button Available parameters are listed as follows Item Description Profile Display the name of the profile Enable Check this box to enable such profile WAN Profile Choose a WAN profile that such...

Page 278: ...Internet IP as the source for the DDNS profile Wildcard and Backup MX The Wildcard and Backup MX features are not supported for all Dynamic DNS providers You could get more detailed information from t...

Page 279: ...Vigor2960 Series User s Guide 271 4 4 8 8 1 1 3 3 D DD DN NS S L Lo og g This page displays the information related to all DDNS...

Page 280: ...ices Available parameters are listed as follows Item Description Enable This Profile Check this box to enable GVRP function Interface Choose LAN and or WAN profiles To clear the selected one click to...

Page 281: ...s are listed as follows Item Description Enable Check this box to enable IGMP proxy function IGMP Proxy Channel The application of multicast will be executed through WAN port In addition such function...

Page 282: ...are listed as follows Item Description Enable This Profile Check this box to enable UPnP function Download Enter the maximum sustained WAN download speed in kilobits second Such information can be re...

Page 283: ...n t work with Firewall Software Enabling firewall applications on your PC may cause the UPnP function not working properly This is because these applications will block the accessing ability of some n...

Page 284: ...m available despite failures The high availability of the Vigor2960 Series is designed to avoid single points of failure When failures occur the failover process moves processing performed by the fail...

Page 285: ...all secondary nodes to replace the failure one and take over the service While in the standby status the secondary nodes are still mirrored the configuration of primary in real time thus the whole sy...

Page 286: ...is no secondary router taking over the service all the data traffic would be terminated To solve the problem two methods can be executed 1 Simply reset Manual Preemption Status from Inactive to Active...

Page 287: ...ed 1 Simply reset Manual Preemption Status from Inactive to Active and then click Apply to save the settings 2 Set the value for Manual Mode Threshold After passing the time configured in Manual Mode...

Page 288: ...tect connection status of all enabled WAN profiles If connection status of all enabled WAN profiles are down the master router hands off its position 4 4 8 8 5 5 2 2 H Ho ot t S St ta an nd db by y M...

Page 289: ...e interval of refresh time to obtain the latest status The information will update immediately when the Refresh button is clicked Refresh Renew current web page Profile Number Limit Display the total...

Page 290: ...e one of the LAN profiles that such function will be applied to Virtual IP for Gateway Assign an IP address as a virtual IP VHID It means Virtual Host ID Type a number as VHID for such function VHID i...

Page 291: ...m is that each access point in LAN will participate in different high availability sessions All the WAN interfaces can be active which provide more flexible utilization of network service When LAN1 in...

Page 292: ...nt to delete and click the Delete button Refresh Renew current web page Auto Refresh Specify the interval of refresh time to obtain the latest status The information will update immediately when the R...

Page 293: ...plied to Virtual IP for Gateway Assign an IP address as a virtual IP VHID It means Virtual Host ID Type a number as VHID for such function VHID is used for Backup router to identify which Master will...

Page 294: ...Vigor2960 Series User s Guide 286 4 Enter all of the settings and click Apply...

Page 295: ...he setting page of Bind IP to MAC Wake by Two types provide for you to wake up the bound IP If you choose Wake by MAC Address you have to type the correct MAC address of the host in MAC Address boxes...

Page 296: ...e allows you to specify SMS provider who will get the SMS what the content is and when the SMS will be sent Each item will be explained as follows Item Description Edit Modify the selected profile To...

Page 297: ...enable such profile SMS Provider Choose the SMS provider object profile from the drop down list Such profiles can be created from Object Setting SMS Service Object Recipient Type the cell phone numbe...

Page 298: ...onding settings for the selected profile Refresh Renew current web page Index Display the index number from 1 to 10 of the profile Enable This Profile Display the status of the profile False means dis...

Page 299: ...Setting Mail Service Object Recipient Type the e mail address for receiving the mail Notify Profile Choose a profile specify the timing for sending SMS from the drop down list Such profiles can be cr...

Page 300: ...VPN technology you can send data between two computers across a shared or public network in a manner that emulates the properties of a point to point private link Below shows the menu items for VPN a...

Page 301: ...ilable parameters are listed as follows Item Description Type Specify which protocol PPTP or IPsec will be used for such VPN profile VPN Settings Via Select From Current Settings Current VPN LAN to LA...

Page 302: ...294 3 Specify the type Click Create New VPN Profile and type the name of the profile Then click Next 4 If you choose PPTP as the Type you will get the following screen Available parameters are listed...

Page 303: ...twork connection Server IP Host Name Type the IP address or host name of PPTP server PPTP User Name Type a user name for authentication in PPTP connection PPTP Password Type a password for authenticat...

Page 304: ...ote Host Type the WAN IP address for the remote host Remote IP Subnet Mask Type the LAN IP address and LAN subnet mask for the remote host More Remote Subnet Add more remote subnet in this field if re...

Page 305: ...isable this function The recommended value is 30 seconds if enabled DPD Timeout It is the timeout timer The peer will be declared dead once no acknowledge message is received after timeout value Use t...

Page 306: ...s for VPN server Such wizard will guide to set the LAN to LAN profile for VPN dial in connection from client to server step by step H Ho ow w t to o c cr re ea at te e L LA AN N t to o L LA AN N p pr...

Page 307: ...e Name is available only when you click this setting Profile Name Type a new name for such profile Next Go to next page Cancel Cancel the configuration and return to the home page of such function 3 C...

Page 308: ...function can block data transmission of Netbios Naming Packet inside the tunnel If you choose IPsec as the Type in Step 1 you will get the following page Available parameters are listed as follows Ite...

Page 309: ...tocol The data will be encrypted and authenticated Choose AH to specify the IPsec protocol for the Authentication Header protocol The data will be authenticated but not be encrypted DPD Delay DPD mean...

Page 310: ...Vigor2960 Series User s Guide 302 5 Click OK Then return to VPN and Remote Access VPN Server Wizard The new added VPN server profile will be displayed on the screen...

Page 311: ...TP VPN L2TP VPN SSL VPN etc of Vigor Router to allow VPN tunnel pass through Available parameters are listed as follows Item Description Enable PPTP VPN Service Enable L2TP VPN Service Enable SSL Tunn...

Page 312: ...PE Encryption Specify one of the encryptions for such server It is available only when MS CHAP or MS CHAP_v2 is selected User Authentication Type Set user authentication to Local server or RADIUS serv...

Page 313: ...n for VPN Apply Click it to save the configuration Cancel Click it to discard the settings configured in this page 4 4 9 9 4 4 2 2 L L2 2T TP P This page display current status for VPN tunnel built wi...

Page 314: ...ign IP address to every host in the LAN DHCP Server Location It is available when DHCP Relay is enabled Choose the WAN LAN interface for the DHCP server DHCP Server IP Address It is available when DHC...

Page 315: ...lows Item Description Preshared Key Specify a key for IKE authentication Confirm Pre Shared Key Retype the characters to confirm the pre shared key WAN Profile Choose a WAN interface profile to be use...

Page 316: ...r for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delete a profile simply select the one you want to delete and click the Delete button Refr...

Page 317: ...integrity and confidentiality by encryption These objectives are met through the use of two traffic security protocols the Authentication Header AH and the Encapsulating Security Payload ESP and thro...

Page 318: ...in a secure channel to set up the IPsec session However the Aggressive mode is faster The default value in Vigor router is Main mode Auth Type The authentication to be used by Pre Shared Key or RSA Si...

Page 319: ...FS function A new Diffie Hellman Key Exchange is included every time an encryption and or authentication key are computed on PFS Dead Peer Detection Status Enable or disable the DPD function DPD Delay...

Page 320: ...into Netbios Naming Packet Enable Click it to have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connecting Disable When there is conflict occurred betwe...

Page 321: ...t Key This value is used for the remote client to authenticate the source of the packet The length is 4 bytes Apply Click it to save the configuration Cancel Click it to exit the page without saving t...

Page 322: ...and applied acceptabove When the VPN tunnel is established only the selected proposal will be accepted and applied by this device Apply Click it to save the configuration Cancel Click it to exit the p...

Page 323: ...conds Server IP Host Name Type the IP address or the host name of PPTP server PPTP User Name Type a user name for authentication in PPTP connection PPTP Password Type a password for authentication in...

Page 324: ...oose Please choose PPTP Dial In for this case PPTP User Name Choose a PPTP user profile for authentication in PPTP connection Such profile shall be created in User Management User Profile previously Y...

Page 325: ...ssion of Netbios Naming Packet inside the tunnel Apply Click it to save the configuration Cancel Click it to exit the page without saving the configuration 4 Enter all of the settings and click Apply...

Page 326: ...orithm offered Round Robin Weighted Round Robin and Fastest Binding Tunnel Policy mechanism allows users to encrypt the data in transmission or specified service function in transmission and define sp...

Page 327: ...it window will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delete a profile simply select the one you want to delete and click th...

Page 328: ...oad Balance or Failover Load Balance Interface Choose VPN profile s as the interface Note Only the VPN profiles with GRE function enabled will be listed and selected as Interface setting If there is n...

Page 329: ...elect the one you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delet...

Page 330: ...H Ho ow w t to o a ad dd d a a L Lo oa ad d B Ba al la an nc ce e R Ru ul le e p pr ro of fi il le e 1 Open VPN and Remote Access VPN TRUNK Management and click the Load Balance Rule tab 2 Simply cli...

Page 331: ...tings and click Apply 5 A new profile has been created 4 4 9 9 8 8 C Co on nn ne ec ct ti io on n M Ma an na ag ge em me en nt t 4 4 9 9 8 8 1 1 C Co on nn ne ec ct ti io on n M Ma an na ag ge em me e...

Page 332: ...Display the virtual network established by such VPN profile Up Time Display the connection time of this VPN tunnel RX Packets Display the total received packets through this VPN TX Packets Display the...

Page 333: ...conforming to standard X 509 Any entity wants to utilize digital certificates should first request a certificate issued by a CA server It should also retrieve certificates of other trusted CA servers...

Page 334: ...ocal certificate can be signed by itself or signed by a root CA Each item will be explained as follows Item Description Upload Click this button to open the following dialog to upload selected certifi...

Page 335: ...te Status Display the status of local certificate Valid From Display the starting point of the valid time of local certificate Valid To Display the end point of the valid time of local certificate H H...

Page 336: ...pe the name of the city for such certificate State Province Type the name of the state province for such certificate Common Name Type the common name for such certificate Email Address Type the e mail...

Page 337: ...into any place you want If you have already gotten a certificate from a third party you may import it directly The supported types are PKCS12 Certificate and Certificate with a private key 1 Open Cer...

Page 338: ...ick the Select button to open the follwoing dialog 4 From the above dialog choose the certificate you want and click Open The dialog box with the selected certificate file name will be shown as follow...

Page 339: ...es for both clients requesting for network connection It allows you to import the third party certificate authenticated by other certification authority CA to be used as a CA for signing the local cer...

Page 340: ...o Vigor router Delete Remove the selected item of trusted CA listed below Name Display the name of trusted certificate built Subject Display the subject of trusted certificate built Issuer Display the...

Page 341: ...ient Each item will be explained as follows Item Description Upload Click this button to open the following dialog to upload selected certificate onto the router After choosing the PKCS12 Certificate...

Page 342: ...cted item of trusted CA listed below Select File Use the Browse button to specify a file to be used as a certificate Name Display the name of certificate built Subject Display the subject of certifica...

Page 343: ...through SSL VPN in comparing with traditional VPN 4 4 1 11 1 1 1 S SS SL L W We eb b P Pr ro ox xy y SSL Web Proxy will allow the remote users to access the internal web sites over SSL Each item will...

Page 344: ...SSL Web Proxy 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Profile Type name of the profile URL Type the address functio...

Page 345: ...you want to modify and click the Edit button The edit window will appear for you to modify the corresponding settings for the selected profile Delete Remove the selected profile To delete a profile si...

Page 346: ...hat you create IP Address Type the IP address for this protocol Port Specify the port used for this protocol The default setting is 5900 Scaling Chose the percentage 100 80 60 for such application App...

Page 347: ...elected profile To delete a profile simply select the one you want to delete and click the Delete button Refresh Renew current web page Profile Number Limit Display the total number 30 of the profiles...

Page 348: ...P Address Type the IP address for this protocol Port Specify the port used for this protocol Screen Size Chose the screen size for such application Apply Click it to save the configuration Cancel Clic...

Page 349: ...DrayTek SSL VPN portal interface Each item will be explained as follows Item Description Refresh Renew current web page Auto Refresh Specify the interval of refresh time to obtain the latest status Th...

Page 350: ...and any other TR 069 CPE by the function of central VPN management In addition it can be treated as a server called CVM server which can manage TR 069 CPE for periodical firmware upgrade configuratio...

Page 351: ...rofile Specify an interface for VPN management Port Type a port number for Vigor2960 Username Type a username which will be used by any CPE tried to connect to Vigor router Password Type a password wh...

Page 352: ...e to be used Local IP Subnet Type the IP address and subnet mask of local host IPsec Security Method Choose one of the following methods for the security of data transmission For example choose AH to...

Page 353: ...ows you to manage the CPEs connected to Vigor2960 Page without CPE connected Page with CPE connected Available parameters are listed as follows Item Description Managed Devices Status This area displa...

Page 354: ...mporary place for the administrator to retrieve It is useful especially for the CPEs deleted carelessly If you want to retrieve some CPE click it to open another window Deleted CPEs containing related...

Page 355: ...ge File Explorer Click it to open a file explorer The available firmware will be displayed in such page Profile Display the name of the profile Device Display the name named by Vigor2960 of the device...

Page 356: ...ce e P Pr ro of fi il le e Follow the steps below to create a new maintenance profile 1 Click Add on the Maintenance area 2 The Maintenance dialog appears Available parameters are listed as follows It...

Page 357: ...ule configured here Now The action will be performed for the selected CPE immediately Once The action will be performed for the selected CPE at the specified time and will be done for once Weekdays Th...

Page 358: ...ered to configure VPN settings for building VPN connection between Vigor2960 treated as VPN server and other Vigor router treated as CPE device i e VPN client Available parameters are listed as follow...

Page 359: ...from the Device drop down list choose the name of the CPE select PPTP or IPsec as the Dial Type choose PAP_only or PAP_or_CHAP as PPP authentication enable or disable VJ Compression then click Connec...

Page 360: ...tailed information Connected Devices Once the VPN is established successfully the basic information such as the connection type IP address RX RX will be displayed on this field Refresh Click it to ref...

Page 361: ...Vigor2960 Series User s Guide 353 4 4 1 12 2 2 2 3 3 M Ma ap p To display the location of the selected CPE with a bird s eye view open Central VPN Management CPE Management and click the tab of Map...

Page 362: ...er s Guide 354 4 4 1 12 2 3 3 L Lo og g A Al le er rt t The Log page offers brief information to identify the CPE connected to Vigor2960 The Alert page offers brief information to identify the CPE con...

Page 363: ...o network or servers for supporting timing sensitive and mission critical network applications such as VoIP Voice over IP and online gaming applications Differentiated quality of service is therefore...

Page 364: ...he corresponding settings for the selected profile Refresh Renew current web page QoS WAN Display the WAN interface used for QoS Outgoing Status Display bandwidth for the outgoing data is enabled or d...

Page 365: ...transmission rate for the outgoing incoming data The range can be set from 64000 to 10000000 Click the unit Kbps or Mbps for such rate High Medium Normal Low There are several available outgoing queue...

Page 366: ...apply hardware QoS Status Enable Click it to enable QoS for outgoing incoming traffic Disable Click it to disable QoS for outgoing incoming traffic Bandwidth Type the number as the total transmission...

Page 367: ...d profile Delete Remove the selected profile To delete a profile simply select the one you want to delete and click the Delete button Rename Allow to modify the selected profile name Refresh Renew cur...

Page 368: ...ru ul le e p pr ro of fi il le e 1 Open Bandwidth Management QoS Rule 2 Simply click the Add button 3 The following dialog will appear Available parameters are listed as follows Item Description Profi...

Page 369: ...t Normal is the lowest Local Address Click on the left side of the Source IP Object Source IP Group profile Check the object profile s as the source target Local IP Object Use the drop down list to ch...

Page 370: ...emote IP Object Remote IP Group profile Check the object profile s as the destination target Remote IP Object Use the drop down list to choose one of the destination IP objects for such rule profile R...

Page 371: ...ch service type Protocol There are two options TCP UDP and TCP UDP Select the protocol that you want to use Source Port Start End Type the start end number for the port range of the source port for su...

Page 372: ...ill be sent with highest priority during the process of data transmission Each item will be explained as follows Item Description Enable Enable Click it to enable VoIP QoS function SIP UDP Port Set a...

Page 373: ...that will be easily to be identified by server on ISP Each item will be explained as follows Item Description Enable Enable Click it to enable DSCP Re Tag function High Medium Normal Low There are fou...

Page 374: ...tem will be explained as follows Item Description Add Add a new profile Edit Modify the selected profile To edit a profile simply select the one you want to modify and click the Edit button The edit w...

Page 375: ...ult message to display on the page that the user tries to access into the blocked web page Disable Type the message manually to display on the page that the user tries to access into the blocked web p...

Page 376: ...nnot be typed with 0 otherwise the profile cannot be saved general target Time Object Click the triangle icon to display the profile selection box Choose a schedule object profile to be applied on suc...

Page 377: ...been created 4 4 1 13 3 4 4 B Ba an nd dw wi id dt th h L Li im mi it t The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications fo...

Page 378: ...his radio button to configure the default limitation for bandwidth for any LAN IP not included in the Limitation List Session Threshold When session number exceeds the set threshold Smart Bandwidth li...

Page 379: ...ed of the downstream If you do not set the limit in this field the system will use the default speed for the specific limitation you set for each index Do not type the value with 0 otherwise the profi...

Page 380: ...t The selected profile will be treated as source target You can click to create another new IP object profile Source IP Group Click the triangle icon to display the profile selection box Choose one or...

Page 381: ...router are allowed to connect to USB modem Models of the modems supported by Vigor router can be seen from USB Application Modem Support List For network connection via USB modem refer to WAN General...

Page 382: ...password configured for the user profile Before adding or modifying settings in this page please insert a USB storage disk first At present the Vigor router can support USB storage disk with versions...

Page 383: ...o sessions used for the IP and the FTP server The default setting is 10 4 4 1 14 4 3 3 T Te em mp pe er ra at tu ur re e S Se en ns so or r A USB Thermometer is now available that complements your ins...

Page 384: ...function Display Unit Choose Celsius or Fahrenheit as the display unit Temperature Alert Lower limit Temperature Alert Upper limit Type the upper limit and lower limit for the system to send out tempe...

Page 385: ...Enter all of the settings and click Apply 4 4 1 14 4 4 4 M Mo od de em m S Su up pp po or rt t L Li is st t Such page provides the information about the brand name and model name of the USB modems wh...

Page 386: ...SNMP Setup Reboot System Firmware Upgrade and Upload Language File Below shows the menu items for System Maintenance 4 4 1 15 5 1 1 T TR R 0 06 69 9 This device supports TR 069 standard It is very con...

Page 387: ...ge to syslog The default setting Disable Click Enable to make the log message being recorded by Syslog Periodic Status The default setting is Enable Please set periodic time for VigorACS to send notif...

Page 388: ...word for accessing into the WUI of the router Each item will be explained as follows Item Description Original Password Type the old password New Password Type the new password Confirm Password Re typ...

Page 389: ...pt Config File Choose it to encrypt the whole configuration file Password Type a password for encrypting the file Confirm Password Retype the password for confirmation Encode Password in Config Choose...

Page 390: ...for restoring it for use next time Password Type a password for encrypting the file Confirm Password Retype the password for confirmation Restore Type Choose one of the types to determine where the fi...

Page 391: ...g equipments 4 4 1 15 5 4 4 1 1 S Sy ys sL Lo og g F Fi il le e This page displays all the operation logs for the router Available parameters are listed as follows Item Description Refresh Renew the w...

Page 392: ...e a name for the router Log to USB Enable Click it to save the log onto USB disk Disable Click it to disable the function of log to USB USB Syslog Keep Days Type the days that USB disk will keep the l...

Page 393: ...e listed as follows Item Description Enable Check the box to enable such profile Mail From Type a mail address for the mail sender Mail To Assign a mail address for the mail receiver Add Click this bu...

Page 394: ...the system time functions run successfully Typically NTP achieves high accuracy and reliability with multiple redundant servers and diverse network paths Available parameters are listed as follows Ite...

Page 395: ...agement through web page Telnet Allow Click Enable to allow system administrator to login from the telnet and management the web page of the router Telnet Port Type the port number for the management...

Page 396: ...o the router and the later box indicates a subnet mask allowed to login to the router Apply to LAN Choose the LAN profile s that the IPs controlled under such profile are allowed to access into the we...

Page 397: ...Click Enable to use the default IP and mask of the host as the SNMP agent If you click Disable you need to type the IP address and choose the mask manually in related fields Notification Host IP Type...

Page 398: ...h Current Configurations and click Reboot To reset the router settings to default values click Reboot with Factory Default Configurations and click Reboot The router will take a period of time to rebo...

Page 399: ...hoose a time object from the drop down list of Schedule Time Object After clicking Apply Vigor router will reboot at the specified time Usually you have to configure required time object from Objects...

Page 400: ...k s web site or FTP site The DrayTek web site is www DrayTek com or local DrayTek s web site and FTP site is ftp DrayTek com Click System Maintenance Firmware Upgrade Available parameters are listed a...

Page 401: ...and Traffic Graph for the user to review such information 4 4 1 16 6 1 1 R Ro ou ut ti in ng g T Ta ab bl le e Click Diagnostics and click Routing Table to open the web page 4 4 1 16 6 1 1 1 1 R Ro o...

Page 402: ...ude U route is up H target is a host G use gateway R reinstate route for dynamic routing D dynamically installed by daemon or redirect M modified from routing daemon or redirect A installed by addrcon...

Page 403: ...address for such route Flags Display the flag of the routing entry Possible flags include U route is up H target is a host G use gateway R reinstate route for dynamic routing D dynamically installed...

Page 404: ...Ta ab bl le e Each item will be explained as follows Item Description Refresh Renew the web page Clear All Remove all of the information from this page Search Move the mouse cursor onto the box of Se...

Page 405: ...6 2 2 2 2 I IP Pv v6 6 N Ne ei ig gh hb bo or r T Ta ab bl le e Each item will be explained as follows Item Description Refresh Renew the web page Search Move the mouse cursor onto the box of Search C...

Page 406: ...to be reachable Yet until traffic is sent to the neighbor no attempt should be made to verify its reachability DELAY The neighbor is no longer to be reachable and the traffic has recently been sent to...

Page 407: ...Description Refresh Renew the web page Search Move the mouse cursor onto the box of Search Click the mouse button and type the keyword inside the box The system will display the records relating to t...

Page 408: ...web page Search Move the mouse cursor onto the box of Search Click the mouse button and type the keyword inside the box The system will display the records relating to the keyword Interface Display th...

Page 409: ...the web page Search Move the mouse cursor onto the box of Search Click the mouse button and type the keyword inside the box The system will display the records relating to the keyword Source Display t...

Page 410: ...N Use the drop down menu to choose a LAN profile WAN Use the drop down menu to choose a WAN profile Apply Click it to save the configuration configured under the Setup tab CPU Click the CPU tab There...

Page 411: ...information of LAN operation about recent 7 days Recent 4 Weeks Display the information of LAN operation about recent 4 weeks WAN Click the WAN tab There are three selections provided for you to spec...

Page 412: ...er to the host Simply type the IP address of the host in the box and click Run The result of route trace will be shown on the screen Each item will be explained as follows Item Description Ping TraceR...

Page 413: ...lows Item Description Enable Dataflow Monitor Check this box to enable such function Block Prevent the specified PC accessing into Internet within 5 minutes UnBlock Allow the specified PC accessing in...

Page 414: ...y the IP address of the WAN interface RX Rate Display the rate of data received TX Rate Display the rate of data transmitted RX byte Display the file size of data received TX byte Display the file siz...

Page 415: ...to Vigor2960 Clear Click the icon to remove the record of the device when it is offline From this web page check the box of Enable External Devices Later all the available devices will be displayed i...

Page 416: ...Vigor2960 Series User s Guide 408 This page is left blank...

Page 417: ...ng to factory default setting if necessary If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 5 5 1 1 C Ch he ec ck k...

Page 418: ...link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Windows 7 As to the examples for oth...

Page 419: ...CP IP and then click Properties 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally click OK F Fo or r M Ma ac c O OS S 1 Double click on the current used M...

Page 420: ...Vigor2960 Series User s Guide 412 3 On the Network screen select Using DHCP from the drop down list of Configure IPv4...

Page 421: ...er correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista 7 The DOS command dialog will...

Page 422: ...he ec ck ki in ng g I If f t th he e I IS SP P S Se et tt ti in ng gs s a ar re e O OK K o or r N No ot t Open Online Status to check current network status Be careful to check if the settings coming...

Page 423: ...y returning to the default settings Try to reset the router by software or hardware Warning After pressing factory default setting you will lose all settings you did before Make sure you have recorded...

Page 424: ...lt configuration After restore the factory default setting you can configure the settings for the router again to fit your personal request 5 5 6 6 C Co on nt ta ac ct ti in ng g D Dr ra ay yT Te ek k...