Draytek Vigor2133 Vac, User Manual

Page 1: ......

Page 2: ...Vigor2133 Series User s Guide ii Vigor2133 Series Gigabit Broadband Router User s Guide Version 1 2 Firmware Version V3 8 8 For future update please visit DrayTek web site Date April 24 2018...

Page 3: ...the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep your purchas...

Page 4: ...tion 21 I 5 8 2 Virtual WAN 23 I 6 Quick Start Wizard 24 I 7 Service Activation Wizard 33 I 8 Registering Vigor Router 35 Part II Connectivity 37 II 1 WAN 38 Web User Interface 39 II 1 1 General Setup...

Page 5: ...2 1x 100 II 3 Hardware Acceleration 101 II 4 NAT 103 Web User Interface 104 II 4 1 Port Redirection 104 II 4 2 DMZ Host 108 II 4 3 Open Ports 111 II 4 4 Port Triggering 114 II 4 5 ALG 116 II 5 Applica...

Page 6: ...Setting 184 III 1 8 Station Control 187 III 1 9 AP Discovery 187 III 1 10 Bandwidth Management 189 III 1 11 Airtime Fairness 190 III 1 12 Band Steering 192 III 1 13 Roaming 196 III 1 14 Station List...

Page 7: ...rnet 277 V 2 Central Security Management CSM 281 Web User Interface 282 V 2 1 APP Enforcement Profile 282 V 2 2 URL Content Filter Profile 286 V 2 3 Web Content Filter Profile 290 V 2 4 DNS Filter Pro...

Page 8: ...2 Steps for Configuring a Web Portal Profile 372 Application Notes 384 A 1 How to create Facebook APP for Web Portal Authentication 384 A 2 How to create Google APP for Web Portal Authentication 390 V...

Page 9: ...s from USB storage device connecting to Vigor router 448 Part VIII Troubleshooting 451 VIII 1 Diagnostics 452 Web User Interface 453 VIII 1 1 Dial out Triggering 453 VIII 1 2 Routing Table 454 VIII 1...

Page 10: ...s Guide x VIII 6 Backing to Factory Default Setting If Necessary 478 VIII 7 Contacting DrayTek 479 Appendix I VLAN Applications on Vigor Router 480 Part IX Telnet Commands 489 Accessing Telnet of Vig...

Page 11: ...P Pa ar rt t I I I In ns st ta al ll la at ti io on n This part will introduce Vigor router and guide to install the device in hardware and software...

Page 12: ......

Page 13: ...ore efficiency than before By the way DoS DDoS prevention and URL Web content filter strengthen the security outside and control inside Object based firewall is flexible and allows your network be saf...

Page 14: ...d to this port is on hook Blinking A phone call comes On A USB device is connected and active USB Blinking The data is transmitting On Wireless access point is ready Blinking Ethernet packets are tran...

Page 15: ...ireless function is ready the green LED will be on WLAN Off Press the button and release it within 2 seconds to turn off the WLAN function When the wireless function is not ready the LED will be off W...

Page 16: ...odem DSL Modem Media Converter to any WAN port of router with Ethernet cable RJ 45 2 Connect one port of 4 port switch to your computer with a RJ 45 cable This device allows you to connect 4 PCs direc...

Page 17: ...ovided on the Vigor2133 packaging box to enable you to space the screws correctly on the wall 2 Place the template on the wall and drill the holes according to the recommended instruction 3 Fit screws...

Page 18: ...Cs connected this router can print documents via the router The example provided here is made based on Windows 7 For other Windows system please visit www DrayTek com Before using it please follow the...

Page 19: ...ser s Guide 7 4 A dialog will appear Click Add a local printer and click Next 5 In this dialog choose Create a new port In the field of Type of port use the drop down list to select Standard TCP IP Po...

Page 20: ...User s Guide 8 6 In the following dialog type 192 168 1 1 router s LAN IP in the field of Hostname or IP Address and type 192 168 1 1 as the Port name Then click Next 7 Click Standard and choose Gene...

Page 21: ...your system will ask you to choose right name of the printer that you installed onto the router Such step can make correct driver loaded onto your PC When you finish the selection click Next 9 Type a...

Page 22: ...Vigor2133 Series User s Guide 10 10 Choose Do not share this printer and click Next 11 Then in the following dialog click Finish...

Page 23: ...uide 11 12 The new printer has been added and displayed under Printers and Faxes Click the new printer icon and click Printer server properties 13 Edit the property of the new printer you have added b...

Page 24: ...or choosing the correct protocol and LPR name The printer can be used for printing now Most of the printers with different manufacturers are compatible with vigor router Info Some printers with the fa...

Page 25: ...he same subnet as the default IP address of Vigor router 192 168 1 1 For the detailed information please refer to the later section Trouble Shooting of the guide 2 Open a web browser on your PC and ty...

Page 26: ...page will be different slightly in accordance with the type of the router you have 5 The web page can be logged out according to the chosen condition The default setting is Auto Logout which means the...

Page 27: ...nto the web user interface with admin mode 3 Go to System Maintenance page and choose Administrator Password 4 Enter the login password the default is admin on the field of Old Password Type New Passw...

Page 28: ...status including System Information IPv4 Internet Access IPv6 Internet Access Interface physical connection Security and Quick Access Click Dashboard from the main menu on the left side of the main pa...

Page 29: ...on is not working LED left side Green It means the router or the function is working Black It means no USB device is connected USB Green It means a USB device is connected Black It means such port is...

Page 30: ...der Quick Access The function links of System Status Dynamic DDNS TR 069 IM P2P Block Schedule Syslog Mail Alert RADIUS Firewall Object Setting and Data Flow Monitor are displayed here Move your mouse...

Page 31: ...indicates that the traffic would be transmitted through LAN port s and then the WAN port The purpose is to perform the traffic monitor of the host s I I 5 5 4 4 G GU UI I M Ma ap p All the functions t...

Page 32: ...on the web user interface Click the Web Console icon on the top of the main screen to open the following screen I I 5 5 6 6 C Co on nf fi ig g B Ba ac ck ku up p There is one way to store current used...

Page 33: ...in ne e S St ta at tu us s I I 5 5 8 8 1 1 P Ph hy ys si ic ca al l C Co on nn ne ec ct ti io on n Such page displays the physical connection status such as LAN connection status WAN connection statu...

Page 34: ...tatus Enable Yes in red means such interface is available but not enabled Yes in green means such interface is enabled Line Displays the physical connection VDSL ADSL Ethernet or USB of this interface...

Page 35: ...nterface is enabled No in red means such interface is not available Mode Displays the type of WAN connection e g TSPC Up Time Displays the total uptime of the interface IP Displays the IP address of t...

Page 36: ...o Wizards Quick Start Wizard The first screen of Quick Start Wizard is entering login password After typing the password please click Next On the next page as shown below please select the appropriate...

Page 37: ...tional Enter the description of the specific network service Username Assign a specific valid user name provided by the ISP Note The maximum length of the user name you can set is 63 characters Passwo...

Page 38: ...the Username Password provided by your ISP Click Next for viewing summary of such connection 3 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol w...

Page 39: ...scription Username Assign a specific valid user name provided by the ISP Note The maximum length of the user name you can set is 63 characters Password Assign a valid password provided by the ISP Note...

Page 40: ...to previous setting page Next Click it to get into the next setting page Cancel Click it to give up the quick start wizard 3 Please type in the IP address mask gateway information originally provided...

Page 41: ...ginally provided by your ISP Available settings are explained as follows Item Description WAN IP Type the IP address Subnet Mask Type the subnet mask Gateway Type the IP address of gateway Primary DNS...

Page 42: ...nformation originally provided by your ISP Then click Next for next step 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown 5 Now yo...

Page 43: ...Note The maximum length of the host name you can set is 39 characters MAC Some Cable service providers specify a specific MAC address for access authentication In such cases you need to enter the MAC...

Page 44: ...Vigor2133 Series User s Guide 32 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown 5 Now you can enjoy surfing on the Internet...

Page 45: ...ogging into the web user interface Service Activation Wizard is a tool which allows you to activate services without accessing into the server MyVigor located on http myvigor draytek com Info Such fun...

Page 46: ...utlets DT APPE developed by DrayTek offers a mechanism to upgrade APPE signature automatically 3 Setting confirmation page will be displayed as follows please click Activate Info The service will be a...

Page 47: ...the router registration 1 Please login the web configuration interface of Vigor router by typing admin admin as User Name Password 2 Click Support Area Production Registration from the home page 3 A L...

Page 48: ...me for the router and choose the right registration date from the popup calendar it appears when you click on the box of Registration Date Click Add 5 When the following page appears your router infor...

Page 49: ...oup of subnets regulated and ruled by router The design of network structure is related to what type of public IP addresses coming from your ISP When the data flow passing through the Network Address...

Page 50: ...IP address assigned by the built in DHCP server of the Vigor router The router itself will also use the default private IP address 192 168 1 1 to communicate with the local hosts Meanwhile Vigor rout...

Page 51: ...Available settings are explained as follows Item Description Index Click the WAN interface link under Index to access into the WAN configuration page Enable V means such WAN interface is enabled and...

Page 52: ...Type the description for such WAN interface Physical Mode Display the physical mode of such WAN interface Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determ...

Page 53: ...Disable Disable the function of VLAN with tag Tag value Type the value as the VLAN ID number The range is from 0 to 4095 Priority Type the packet priority number for such VLAN The range is from 0 to...

Page 54: ...ease configure WAN3 interface Available settings are explained as follows Item Description Enable Choose Yes to invoke the settings for this WAN interface Choose No to disable the settings for this WA...

Page 55: ...ess Mode Use the drop down list to choose a proper access mode The details page of that mode will be popped up If not click Details Page for accessing the page to configure the settings Details Page T...

Page 56: ...ti PVC VLAN Option Number Type a number for such function Note If you choose to configure option 61 here the detailed settings in WAN Interface Access will be overwritten DataType Choose the type ASCI...

Page 57: ...n access Internet through such direction For Wired LAN If you check this box PCs on the same network can use another set of PPPoE session different with the Host PC to access into Internet For Wireles...

Page 58: ...acket transmitted through Vigor router Enable TTL value will be reduced 1 when it passess through Vigor router It will cause the client accessing Internet through Vigor router be blocked by certain IS...

Page 59: ...ic c I IP P For static IP mode you usually receive a fixed public IP address or a public subnet namely multiple public IP addresses from your DSL or Cable ISP service providers In most cases a Cable s...

Page 60: ...ect as detection mode you also can enable this setting to use current WAN gateway IP address for pinging With the IP address es pinging Vigor router can check if the WAN connection is on or off TTL Ti...

Page 61: ...utomatically Click this button to obtain the IP address automatically if you want to use Dynamic IP mode Router Name Type in the router name provided by ISP Domain Name Type in the domain name that yo...

Page 62: ...Specify the IP address of the PPTP L2TP server if you enable PPTP L2TP client mode Specify Gateway IP Address Specify the gateway IP address for DHCP server ISP Access Setup Username Type in the usern...

Page 63: ...signment Method IPCP WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 32 public IP addresses other th...

Page 64: ...200 64 offered by the ISP In addition PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix No need to type any other information for PPP mode Availa...

Page 65: ...PC C Tunnel setup protocol client TSPC is an application which could help you to connect to IPv6 network easily Please make sure your IPv4 WAN connection is OK and apply one free account from hexago...

Page 66: ...roker Type the address for the tunnel broker IP FQDN or an optional port number WAN Connection Detection Such function allows you to verify whether network connection is alive or not through Ping Dete...

Page 67: ...rd you can set is 19 characters Tunnel Broker It means a server of AICCU The server can provide IPv6 tunnels to sites or end users over IPv4 Type the address for the tunnel broker IP FQDN or an option...

Page 68: ...D DUID Display the DHCP unique ID used by such WAN interface Authentication Protocol Such protocol will be used for the client to be authenticated by DHCPv6 server before accessing into Internet There...

Page 69: ...be on always Ping IP Hostname If you choose Ping Detect as detection mode you have to type IP address in this field for pinging TTL Time to Live If you choose Ping Detect as detection mode you have t...

Page 70: ...are explained as follows Item Description Static IPv6 Address configuration IPv6 Address Type the IPv6 Static IP Address Prefix Length Type the fixed value for prefix length Add Click it to add a new...

Page 71: ...able when Bridge Mode is enabled When both Bridge Mode and Firewall check boxes are enabled the settings configured user profiles under User Management will be ignored And all of the filter rules defi...

Page 72: ...llows you to verify whether network connection is alive or not through Ping Detect Mode Choose Always On or Ping Detect for the system to execute for WAN detection Always On means no detection will be...

Page 73: ...are identical across all CE IPv4 addresses within a given 6rd domain It may be any value between 0 and 32 6rd Prefix Type the 6rd IPv6 address 6rd Prefix Length Type the IPv6 prefix length for the 6r...

Page 74: ...Vigor2133 Series User s Guide 62 After finished the above settings click OK to save the settings Below shows an example for successful IPv6 connection based on 6rd mode...

Page 75: ...ription Channel Display the number of each channel Channels 1 is used by the Internet Access web user interface and can not be configured here Channels 4 10 are configurable Enable Display whether the...

Page 76: ...lti VLAN Channel 4 5 6 Enable Select to enable this channel Disable Select to disable this channel General Settings VLAN Tag Type the value as the VLAN ID number Valid settings are in the range from 1...

Page 77: ...ration telnet TR069 If you choose Management the configuration for this VLAN will be effective for Web configuration telnet TR069 IPTV The IPTV configuration will allow the WAN interface to send IGMP...

Page 78: ...entified by the system via their VLAN Tags Channels using the same WAN type may not configure the same VLAN tag value Priority Choose the number to determine the packet priority for such VLAN The rang...

Page 79: ...is enabled on this WAN x WAN Budget is disabled on this WAN Quota The current cycle s Internet usage is expressed as x y where x is the cumulative usage and y is the upper limit For example 100MB 200...

Page 80: ...object Set Mail Alert The system will send out a warning message to the administrator when the quota is running out However the connection charges will be calculated continuously Set SMS message The s...

Page 81: ...Specify the day in the cycle as the starting point which Vigor router will reset the traffic record For example 3 means the third day of the cycle duration Use Cycle in days Cycle duration Specify the...

Page 82: ...sage If the WAN budget is exhausted a lock will be displayed on the page if Shutdown WAN interface is selected Which means no data transmission will be carried out Moreover the system will send out a...

Page 83: ...to demonstrate how to implement an IPv6 address on Vigor Router s WAN 1 Before configuring IPv6 on WAN please make sure the router is connected to the IPv4 Internet 2 Go to WAN Internet Access click...

Page 84: ...k the status from the IPv6 tab on Online Status Physical Connection page 5 Furthermore Network Administrator may test the connectivity of IPv6 from the router by going to Diagnostics Ping Diagnosis an...

Page 85: ...un nn ne el l S Se et tu up p P Pr ro ot to oc co ol l C Cl li ie en nt t In this mode the IPv6 connectivity is provided by a tunnel broker on the IPv4 Internet through a tunnel set up by Tunnel Setu...

Page 86: ...for you you may configure that IPv6 address for WAN by doing the following steps 1 Set Connection Type to Static IPv6 2 Enter the IPv6 address and Prefix Length which provided by the ISP and click Add...

Page 87: ...d manually To use 6in4 Static Tunnel you need sign up for a tunnel broker service and get an IPv6 address and routed IPv6 prefixes first Then configure the router as follows 1 Set Connection Type to 6...

Page 88: ...he packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assigns private IP address to...

Page 89: ...t ta at ti ic c R Ro ou ut te e When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simpl...

Page 90: ...that can be configured to restrict traffic coming in and going out of the computer VLANs on the other hand are usually set up using network switches or routers To communicate with the hosts outside o...

Page 91: ...ls Page Click it to access into the setting page Each LAN will have different LAN configuration page Each LAN must be configured in different subnet IPv6 Click it to access into the settings page of I...

Page 92: ...VLAN on how to set up VLANs In the Inter LAN Routing matrix a selected checkbox means that the 2 intersecting LANs can communicate with each other When you finish the configuration please click OK to...

Page 93: ...ters using the Routing Information Protocol DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network so it automa...

Page 94: ...et and whose address is specified in the DHCP Server IP Address field DHCP Server IP Address It is available when Enable Relay Agent is checked Set the IP address of the DHCP server you are going to u...

Page 95: ...ts plus room for future expansion and use addresses greater than 192 168 1 100 for static assignment I II I 2 2 1 1 2 2 D De et ta ai il ls s P Pa ag ge e f fo or r L LA AN N2 2 L LA AN N4 4 Available...

Page 96: ...ddress pool Note When Clear DHCP lease for inactive clients periodically is enabled router will do the following Check activities of DHCP clients by ARP requests every minute when the available DHCP I...

Page 97: ...OK to save and exit this page I II I 2 2 1 1 3 3 D De et ta ai il ls s P Pa ag ge e f fo or r I IP P R Ro ou ut te ed d S Su ub bn ne et t Available settings are explained as follows Item Description...

Page 98: ...should be identical to the IP Address in the Network Configuration section above Lease Time The maximum duration DHCP issued IP addresses can be used before they have to be renewed Use LAN Port Speci...

Page 99: ...settings are explained as follows Item Description Enable Check the box to enable the configuration of LAN 1 IPv6 Setup WAN Primary Interface Use the drop down list to specify a WAN interface for IPv...

Page 100: ...r Type another IPv6 address for DNS server if required Disable DNS server will not be used Management Configures the Managed Address Configuration flag M bit in Route Advertisements Off No configurati...

Page 101: ...g multiple WANs for IPv6 traffic Router Advertisement Configuration Click Enable to enable router advertisement server The router advertisement daemon sends Router Advertisement messages specified by...

Page 102: ...terface in the LAN IPv6 Setup page additional WANs can be selected to carry IPv6 traffic by enabling them in the Extension WAN section Available WAN Additional WANs available but not currently selecte...

Page 103: ...t One or more IPv4 addresses delimited by commas Data Data of this DHCP option To add a DHCP option entry from scratch clear the data entry fields Enable Interface Option Number DataType and Data by c...

Page 104: ...es for LAN side QoS You can assign each of VLANs to each of the different IP subnets that the router may also be operating to provide even more isolation The said functionality is tag based multi subn...

Page 105: ...ecify the priority for the packets sending by LAN VID Type the value as the VLAN ID number The range is form 0 to 4095 VIDs must be unique Priority Valid values are from 0 to 7 where 1 has the lowest...

Page 106: ...em In its simplest form each of the Gigabit LAN ports can be isolated from each other for example to feed different companies or departments but keeping their local traffic completely separated C Co o...

Page 107: ...is ideal for departmental or multi occupancy applications Info As for the VLAN applications refer to Appendix I VLAN Application on Vigor Router for more detailed information I II I 2 2 3 3 B Bi in n...

Page 108: ...as follows Item Description Enable Click this radio button to invoke this function However IP MAC which is not listed in IP Bind List also can connect to Internet Disable Click this radio button to di...

Page 109: ...ow Select All Select all entries in the ARP Table for manipulation Sort Reorder the entry based on the IP address Refresh Refresh the ARP table listed below to obtain the newest ARP table information...

Page 110: ...select Strict Bind you have to bind one set of IP MAC address for one PC If not no one of the PCs can access into Internet And the web user interface of the router might not be accessed When you finis...

Page 111: ...rom the menu bar of the Web UI to bring up the LAN Port Mirror configuration page Available settings are explained as follows Item Description Port Mirror Enables or disables LAN Port Mirroring Mirror...

Page 112: ...nticated on each LAN port Select LAN Wired 802 1X from the menu bar of the Web UI to bring up the Wired 802 1X configuration page Available settings are explained as follows Item Description Enable Ch...

Page 113: ...aming by hardware itself Open Hardware Acceleration to access into the following page Available settings are explained as follows Item Description Mode Disabled The default setting Auto When the hardw...

Page 114: ...Therefore the performance will be lower than only one host Choose this option to specify certain PCs on LAN to apply the hardware acceleration Enable Check the box to make PC s specified in the select...

Page 115: ...ic IP address and the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes Save cost on applying publ...

Page 116: ...ss domain name are recognized by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the goal of...

Page 117: ...y the transport layer protocol TCP or UDP Public Port Display the port number which will be redirected to the specified Private IP and Port of the internal host Source IP Display the source IP address...

Page 118: ...ding port Source IP Use the drop down list to specify an IP object Or click IP Object link to create a new one for applying Private IP Specify the private IP address of the internal host providing the...

Page 119: ...Vigor2133 Series User s Guide 107...

Page 120: ...gle host in the LAN Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be tot...

Page 121: ...low The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from the a...

Page 122: ...ndow will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host Whe...

Page 123: ...ant to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Comment Specify the name for the defined network service WAN Interface Displ...

Page 124: ...y the WAN IP address that will be used for this entry This setting is available when WAN IP Alias is configured Private IP Enter the private IP address of the local host or click Choose IP to select o...

Page 125: ...Vigor2133 Series User s Guide 113 After finishing all the settings here please click OK to save the configuration...

Page 126: ...used The default durations are shown below and these duration values can be modified via telnet commands TCP 86400 sec UDP 180 sec IGMP 10 sec TCP WWW 60 sec TCP SYN 60 sec Available settings are expl...

Page 127: ...create a new one for applying Triggering Protocol Select the protocol TCP UDP or TCP UDP for such triggering profile Triggering Port Type the port or port range for such triggering profile Incoming P...

Page 128: ...o be transmitted and received correctly via NAT by Vigor router However SIP ALG makes SIP message and RTP packets of voice be transmitted and received correctly via NAT by Vigor router Available setti...

Page 129: ...IP address es to correspondent servers Thus even the remote PC is adopting public DNS as the DNS server the LAN DNS resolution on Vigor2133 series will respond the specified private IP address S Sc c...

Page 130: ...r wants to wake up a specified PC through the router he she must type correct MAC address of the specified PC on this web page of Wake on LAN WOL of this router In addition such PC must have installed...

Page 131: ...main name from the DDNS provider say hostname dyndns org and an account with username test and password test 2 Open Applications Dynamic DNS 3 In the DDNS setup menu check Enable Dynamic DNS Setup Ava...

Page 132: ...he domain name that you set on the setting page of DDNS setup 4 Select Index number 1 to add an account for the router Check Enable Dynamic DNS Account and choose correct Service Provider dyndns org t...

Page 133: ...Connection Type There are two connection types HTTP and HTTPs to be specified Note that such option is available when Customized is selected as Service Provider Server Response Type any text that you...

Page 134: ...will see your setting has been saved D Di is sa ab bl le e t th he e F Fu un nc ct ti io on n a an nd d C Cl le ea ar r a al ll l D Dy yn na am mi ic c D DN NS S A Ac cc co ou un nt ts s Uncheck Enab...

Page 135: ...IP address es to correspondent servers Thus even the remote PC is adopting public DNS as the DNS server the LAN DNS resolution on Vigor2133 series will respond the specified private IP address Simply...

Page 136: ...tings are explained as follows Item Description Enable Check this box to enable such profile Profile Type a name for such profile Note If you type a name here for LAN DNS and click OK to save the conf...

Page 137: ...profile just created Or you can click index 2 to use this profile as conditional DNS forwarding Available settings are explained as follows Item Description Enable Check this box to enable such profil...

Page 138: ...DNS security management Interface There are four WAN interfaces allowed to be set with DNS security enabled Primary DNS Display the IP address of primary DNS obtained from DHCP server or specified by...

Page 139: ...IP address IPv4 IPv6 that you want to query Interface Specify the interface required for executing diagnose DNS Server Type the IP address of the DNS Server which will diagnose the domain specified ab...

Page 140: ...In System Maintenance Time and Date menu press Inquire Time button to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is...

Page 141: ...Internet Access or VPN and Remote Access LAN to LAN settings To add a schedule 1 Click any index say Index No 1 2 The detailed settings of the schedule with index 1 will be shown below Available sett...

Page 142: ...ns the action applied such schedule will be executed every three days since the date defined on the Start Date 3 Click OK button to save the settings Example Suppose you want to control the PPPoE Inte...

Page 143: ...d as a RADIUS client Therefore this page is used to configure settings for external RADIUS server Then LAN user of Vigor router will be authenticated by such server for network application Available s...

Page 144: ...Control Service or Connection Status Service Default WAN It is used to specify the WAN interface for applying such function The reminder as regards concern about Firewall and UPnP Can t work with Fire...

Page 145: ...service you subscribe General Query Interval Vigor router will periodically check which IP obtaining IPTV service by sending query It might cause inconvenience for client Therefore set a suitable tim...

Page 146: ...ng g G Gr ro ou up p Available settings are explained as follows Item Description Refresh Click this link to renew the working multicast group status Group ID This field displays the ID port for the...

Page 147: ...able settings are explained as follows Item Description Wake by Two types provide for you to wake up the binded IP If you choose Wake by MAC Address you have to type the correct MAC address of the hos...

Page 148: ...content is and when the SMS will be sent Available settings are explained as follows Item Description Index Check the box to enable such profile SMS Provider Use the drop down list to choose SMS serv...

Page 149: ...ngs SMS Mail Service Object If there is no object listed click Mail Service link to define a new one with specified service provider Mail Address Type the e mail address of the one who will receive th...

Page 150: ...n e g IP setting If the host and user s computer have the plug in bonjour driver install they can utilize the service offered by the router by clicking the router name icon In short what the Clients u...

Page 151: ...tem Maintenance Management Type a name as the Router Name and click OK 4 Next open Applications Bonjour Check the service that you want to use via Bonjour 5 Open the DNSSD page again The available ite...

Page 152: ...Vigor2133 Series User s Guide 140 6 Now any page or document can be printed out through Vigor router installed with a printer...

Page 153: ...r is not on the list Now DrayTek starts to support our own DDNS service DrayDDNS We will provide a domain name for each Vigor Router this single domain name can record IP addresses of all WAN A Ac ct...

Page 154: ...ro of fi il le e 1 Go to Applications Dynamic DNS Setup a Tick Enable Dynamic DNS Setup b Click an available profile index c Tick Enable Dynamic DNS Account d Select DrayTek Global www drayddns com a...

Page 155: ...om ma ai in n N Na am me e Currently only the domain name is allowed to be modified MyVigor website We will need to register the router to MyVigor server and log in to MyVigor website to modify it 1 P...

Page 156: ...me e g XXXX25 and click Update 4 Vigor router will get the modified domain name when the it performs next DDNS updating We can click Sync domain to accelerate this process After few seconds the router...

Page 157: ...Vigor2133 Series User s Guide 145...

Page 158: ...ers to update your IP to the DDNS server We will take Changeip org and 3322 net as example Before setting please make sure that the WAN connection is up P Pa ar rt t A A C Ch ha an ng ge ei ip p o or...

Page 159: ...s dynamic dns update asp u jo p jo hostname j changeip org ip IP cmd update offline 0 In which IP is a value which will be replaced with the current interface IP address automatically when DDNS servic...

Page 160: ...ob for us automatically 1 Please go to Applications Dynamic DNS to create a profile for User Defined DDNS client 2 Set the Service Provider as User Defined 3 Set the Provider Host as member 3322 net 4...

Page 161: ...Vigor2133 Series User s Guide 149 P Pa ar rt t C C E Ex xt te en nd d N No ot te e The customized Service Provider is also eligible with the ClouDNS net...

Page 162: ...terface WAN LAN VPN the data can be sent from the source IP to the destination IP Address Mapping Allows you specify the outgoing WAN IP address es for an internal private IP address or a range of int...

Page 163: ...uting Static Route The router offers IPv4 and IPv6 for you to configure the static route Both protocols bring different web pages S St ta at ti ic c R Ro ou ut te e f fo or r I IP Pv v4 4 Available se...

Page 164: ...ublic subnet 211 100 88 0 via an internal Router B 192 168 1 3 have set Main Router 192 168 1 1 as the default gateway for the Router A 192 168 1 2 Before setting Static Route user A cannot talk to us...

Page 165: ...to enable this profile Destination IP Address Type an IP address as the destination of such static route Subnet Mask Type the subnet mask for such static route Network Interface Use the drop down lis...

Page 166: ...lays the routing table for your reference Index The number 1 to 40 under Index allows you to open next page to set up static route Enable Check the box to enable such static route Destination Address...

Page 167: ...l l S Se et tu up p General Setup lists all the policies and shows whether the policy is enabled disabled what are the criteria to match and through which the interface should the traffic to go if the...

Page 168: ...ng steps 1 Click the Wizard Mode radio button 2 Click Index 1 The setting page will appear as follows Available settings are explained as follows Item Description Source IP Any Any IP can be treated a...

Page 169: ...transferred to the interface chosen here 4 After specifying the interface click Next to get the following page Available settings are explained as follows Item Description Force NAT Force Routing It d...

Page 170: ...Description Enable Check this box to enable this policy Comment Type a brief explanation for such profile Protocol Use the drop down menu to choose a proper protocol for the WAN interface Source Desti...

Page 171: ...pecify the way the packet forwarded to Choose Force NAT or Force Routing Failover to Check this button to lead the data passing through specific interface WAN LAN VPN Route Policy automatically when t...

Page 172: ...cy Analyze how multiple packets Choose such mode to make Vigor router analyze how multiple packets in a specified file will be sent by a route policy Packet Information Specify the nature of the packe...

Page 173: ...oad link to get a blank example file Then click such button to select that blank csv file for saving the result of analysis Analyze Click it to perform the job of analyzing The analyzed result will be...

Page 174: ...IP alias IP Refer to the following figure This document introduces how to set up address mapping with Route Policy When a WAN interface has multiple public IP addresses the administrator may specify t...

Page 175: ...face as WAN and then select Interface address from the drop down list The List can be edited in WAN IP Alias setting Enable Failover to other WAN so the traffic will be sent via other Interface when t...

Page 176: ...Vigor2133 Series User s Guide 164 This page is left blank...

Page 177: ...er s Guide 165 P Pa ar rt t I II II I W Wi ir re el le es ss s L LA AN N Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well...

Page 178: ...802 11n draft 2 protocol To boost its performance further the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can finally smoothly enjoy str...

Page 179: ...ryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connection Yo...

Page 180: ...S is available for the wireless station with WPS supported It is the simplest way to build connection between wireless network clients and vigor router Users do not need to select any encryption mode...

Page 181: ...rt PBC button of network card If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the vigor r...

Page 182: ...home use or internal use for a company and specified for a guest AP for any wireless clients accessing into Internet Follow the steps listed below 1 Open Wizards Wireless Wizard 2 The screen of wirele...

Page 183: ...hannel is 6 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select Auto to let system determine for you Security Key T...

Page 184: ...r PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by 0x su...

Page 185: ...Vigor2133 Series User s Guide 173 5 The following page will display the configuration summary for wireless setting 6 Click Finish to complete the wireless settings configuration...

Page 186: ...AN Check the box to enable wireless function Mode For 2 4GHz At present the router can connect to 11b Only 11g Only 11n Only 2 4 GHz Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultan...

Page 187: ...rveying The system allows you to set four sets of SSID for different usage In default the first set of SSID will be enabled You can hide it for your necessity SSID Means the identification of the wire...

Page 188: ...efault security mode is provided and stated on the label pasted on the bottom of the router For the wireless client who wants to access into Internet through such router please input the default PSK v...

Page 189: ...ients and the encryption key should be entered in PSK WPA2 PSK Accepts only WPA2 clients and the encryption key should be entered in PSK Mixed WPA WPA2 PSK Accepts WPA and WPA2 clients simultaneously...

Page 190: ...to certain wireless clients only by locking their MAC address into a black or white list The user may block wireless clients by inserting their MAC addresses into a black list or only let them be able...

Page 191: ...he selected MAC address in the list Cancel Give up the access control set up OK Click it to save the access control list Clear All Clean all entries in the MAC address list Backup Access Control Setti...

Page 192: ...rocedure The router will wait for WPS requests from wireless clients about two minutes The WPS LED on the router will blink fast when WPS is in progress It will return to normal condition after two mi...

Page 193: ...access into Internet through the router AP with Bridge mode configured The packets received from a WDS link will only be forwarded to local wired or wireless hosts Repeater Extended Wireless stations...

Page 194: ...ure the following settings if required Type There are some types for you to choose WPA and WPA2 are used for WDS devices e g 2925n wireless router you can set the encryption mode as WPA or WPA2 to est...

Page 195: ...s page at one time Similarly if you want to invoke the peer MAC address remember to check Enable box in the front of the MAC address after typing Access Point Function Click Enable to make this router...

Page 196: ...or router will use 20MHz 40MHz 80MHz for data transmission and receiving between the AP and the stations 20 40 Vigor Router will scan for nearby wireless AP and then use 20MHz if the number of AP is m...

Page 197: ...for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing ca...

Page 198: ...will detect scan the country code to prevent conflict occurred If conflict is detected wireless station will be warned and is unable to make network connection Therefore changing the country code to e...

Page 199: ...ection Time Use the drop down list to choose the duration for the wireless client connecting reconnecting to Vigor router Or type the duration manually when you choose User defined Display All Station...

Page 200: ...l be shown on the box above this button Statistics It displays the statistics for the channels used by APs Add to If you want the found AP applying the WDS settings please type in the AP s MAC address...

Page 201: ...determined according to the limitation of the wireless client Total Upload Limit It is available when Auto Adjustment is selected Type a value to define the maximum data traffic uploading for all of t...

Page 202: ...IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case...

Page 203: ...ns 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Available settings are explained as follows Item Description Enable Airtime Fairness Try to assign sim...

Page 204: ...hat frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization If dual band is detected the AP will let the wireless client conn...

Page 205: ...ent is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of 5GHz network connection the system shall wait and check for several seconds...

Page 206: ...box of Enable Band Steering and use the default value 15 for check time setting 3 Click OK to save the settings 4 Open Wireless LAN 2 4GHz General Setup and Wireless LAN 5GHz General Setup Configure...

Page 207: ...d Wireless LAN 5GHz Security Configure Security as 12345678 for both pages Click OK to save the settings 6 Now Vigor router will let the wireless clients connect to less congested wireless LAN such as...

Page 208: ...requirement and cut off the network connection for that wireless station to assist it to connect another Wireless AP to get better signal This option is to disable the roaming mechanism Strictly Mini...

Page 209: ...with its status code There is a code summary below for explanation For convenient Access Control you can select a WLAN station and click Add to Access Control below Available settings are explained a...

Page 210: ...Vigor2133 Series User s Guide 198 This page is left blank...

Page 211: ...a manner that emulates the properties of a point to point private link It is a form of VPN that can be used with a standard Web browser A digital certificate works as an electronic ID which is issued...

Page 212: ...ween home office and customer Secure connection between Teleworker staff on business trip and main office Exchange data between remote office and main office POS between chain store and headquarters S...

Page 213: ...or VPN dial out connection from server to client step by step 1 Open Wizards VPN Client Wizard The following page will appear Available settings are explained as follows Item Description LAN to LAN Cl...

Page 214: ...es provided here Different type will lead to different configuration page After making the choices for the client profile please click Next You will see different configurations based on the selection...

Page 215: ...Vigor2133 Series User s Guide 203 When you choose IPsec you will see the following graphic When you choose SSL you will see the following graphic...

Page 216: ...the following graphic Available settings are explained as follows Item Description Profile Name Type a name for such profile The length of the file is limited to 10 characters Always On Check to enabl...

Page 217: ...ill be authenticated but not be encrypted By default this option is active High Encapsulating Security Payload ESP means payload data will be encrypted and authenticated You may select encryption algo...

Page 218: ...tton to access VPN and Remote Access Connection Management for viewing VPN Connection status Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server through VPN...

Page 219: ...Site VPN Remote Dial in User You can manage remote access by maintaining a table of remote user profile so that users can be authenticated to dial in via VPN connection Please choose a LAN to LAN Pro...

Page 220: ...in User selected 2 After making the choices for the server profile please click Next You will see different configurations based on the selection you made Here we take the examples of choosing Site to...

Page 221: ...are explained as follows Item Description Profile Name Type a name for such profile The length of the file is limited to 10 characters User Name This field is used to authenticate for connection when...

Page 222: ...ubject Name First or Subject Name First Peer IP VPN Client IP Type the WAN IP address or VPN client IP address for the remote client Peer ID Type the ID name for the remote client The length of the na...

Page 223: ...cc ce es ss s C Co on nt tr ro ol l Enable the necessary VPN service as you need If you intend to run a VPN server inside your LAN you should disable the VPN service of Vigor Router to allow VPN tunne...

Page 224: ...the remote dial in user If the remote dial in user does not support the MPPE encryption algorithm the router will transmit no MPPE encrypted packets Otherwise the MPPE encryption scheme will be used...

Page 225: ...PPP connection You should choose an IP address from the local private network For example if the local private network is 192 168 1 0 255 255 255 0 you could choose 192 168 1 200 as the Start IP Addr...

Page 226: ...oad and use original IP header to encapsulate the data payload only It can just apply to local packet e g L2TP over IPsec The Tunnel mode will not only add the AH ESP payload but also use a new IP hea...

Page 227: ...data will be encrypted and authenticated You may select encryption algorithm from Data Encryption Standard DES Triple DES 3DES and AES After finishing all the settings here please click OK to save th...

Page 228: ...ccount Check it to enable such account profile Accept Any Peer ID Click to accept any peer regardless of its identity Accept Subject Alternative Name Click to check one specific field of digital signa...

Page 229: ...users Besides you can extend the user accounts to the RADIUS server through the built in RADIUS client function The following figure shows the summary table Available settings are explained as follow...

Page 230: ...300 seconds Allowed Dial In Type PPTP Allow the remote dial in user to make a PPTP VPN connection through the Internet You should set the User Name and Password of remote dial in user below IPsec Tunn...

Page 231: ...Psec policy above The length of the password is limited to 19 characters Enable Mobile One Time Passwords mOTP Check this box to make the authentication with mOTP function PIN Code Type the code for a...

Page 232: ...nections by maintaining a table of connection profiles You may set parameters including specified connection direction dial in or dial out connection peer ID connection type VPN connection including P...

Page 233: ...Enable this profile Check here to activate this profile Netbios Naming Packet Pass click it to have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connec...

Page 234: ...this VPN connection and react accordingly This is independent of DPD dead peer detection PING to the IP Enter the IP address of the remote host that located at the other end of the VPN tunnel Dial Out...

Page 235: ...ode Local Certificate Select one of the profiles set in Certificate Management Local Certificate IPsec Security Method This group of fields is a must for IPsec Tunnels and L2TP with IPsec Policy Mediu...

Page 236: ...ons are available for both modes We suggest you select the combination that covers the most algorithms IKE phase 1 key lifetime For security reason the lifetime of key should be defined The default va...

Page 237: ...to make a L2TP VPN connection through the Internet You can select to use L2TP alone or with IPsec Select from below None Do not apply the IPsec policy Accordingly the VPN connection employed the L2TP...

Page 238: ...tal Signature X 509 Check the box of Digital Signature to invoke this function and select one predefined Profiles set in the VPN and Remote Access IPsec Peer Identity Local ID Specify which one will b...

Page 239: ...en you find there are several subnets behind the remote VPN router RIP Direction The option specifies the direction of RIP Routing Information Protocol packets You can enable disable one of direction...

Page 240: ...a LAN port as the transferred direction Then specify an IP address Click Advanced to configure detailed settings if required Advanced Add a static route to direct all traffic destined to more Remote N...

Page 241: ...Vigor2133 Series User s Guide 229 2 After finishing all the settings here please click OK to save the configuration...

Page 242: ...Drop button You may also aggressively Dial out by using Dial out Tool and clicking Dial button Available settings are explained as follows Item Description Dial out Tool General Mode This filed displ...

Page 243: ...i io on n o on n V Vi ig go or r R Ro ou ut te er r f fo or r H He ea ad d O Of ff fi ic ce e 1 Log into the web user interface of Vigor router 2 Open VPN and Remote Access LAN to LAN to create a LAN...

Page 244: ...and L2TP boxes Check the box of Specify Remote and type the Peer VPN Server IP e g 218 242 130 19 in this case Press the IKE Pre Shared Key button to set the PSK and select Medium AH or High ESP as t...

Page 245: ...into the web user interface of Vigor router 2 Open VPN and Remote Access LAN to LAN to create a LAN to LAN profile The following settings are for a permanent VPN connection 3 Click any index number t...

Page 246: ...ervice and type the remote server IP host name e g 218 242 133 91 in this case Press the IKE Pre Shared Key button to set the PSK and select Medium AH or High ESP as the security method 5 Continue to...

Page 247: ...Vigor2133 Series User s Guide 235 7 Open VPN and Remote Access Connection Management to check the dial in connection status from head office...

Page 248: ...network is a form of VPN that can be used with a standard Web browser There are two benefits that SSL VPN provides It is not necessary for users to preinstall VPN client software for executing SSL VPN...

Page 249: ...It will not affect the HTTPS Port configuration set in System Maintenance Management In general the default setting is 443 Server Certificate When the client does not set any certificate default cert...

Page 250: ...guest network or web cafe The SSL technology is the same as the encryption that you use for secure web sites such as your online bank The SSL VPN can be operated in either full tunnel mode or proxy mo...

Page 251: ...ct PPTP or L2TP with or without IPsec policy above The length of the name password is limited to 19 characters Enable Mobile One Time Passwords mOTP Check this box to make the authentication with mOTP...

Page 252: ...el in connecting such function can block data transmission of Netbios Naming Packet inside the tunnel Multicast via VPN Some programs might send multicast packets via VPN connection Pass Click this bu...

Page 253: ...encrypted and authenticated You may select encryption algorithm from Data Encryption Standard DES Triple DES 3DES and AES Local ID Specify a local ID to be used for Dial in setting in the LAN to LAN P...

Page 254: ...ess into DrayTek SSL VPN portal interface Next users can open SSL VPN Online Status to view logging status of SSL VPN Available settings are explained as follows Item Description Active User Display c...

Page 255: ...gor router support digital certificates conforming to standard X 509 Any entity wants to utilize digital certificates should first request a certificate issued by a CA server It should also retrieve c...

Page 256: ...import a saved file as the certification information Refresh Click this button to refresh the information listed below View Click this button to view the detailed settings for certificate request Del...

Page 257: ...T Vigor router allows you to generate a certificate request and submit it the CA server then import it as Local Certificate If you have already gotten a certificate from a third party you may import i...

Page 258: ...s OK Upload PKCS12 Certificate It allows users to import the certificate whose extensions are usually pfx or p12 And these certificates usually need passwords Note that PKCS12 is a standard for storin...

Page 259: ...tings for certificate request Info You have to copy the certificate request information from above window Next access your CA server and enter the page of certificate request copy the information into...

Page 260: ...ficate from a trusted root certificate authority is complicated and time consuming Therefore Vigor router offers a mechanism which allows you to generate root CA to save time and provide convenience f...

Page 261: ...the following window Use Browse to find out the saved text file Then click Import The one you imported will be listed on the Trusted CA Certificate window For viewing each trusted CA certificate click...

Page 262: ...ificate for this router can be saved within one file Please click Backup on the following screen to save them If you want to set encryption password for these certificates please type characters in bo...

Page 263: ...y has been always the most concerned The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders It also restricts users in the local network from a...

Page 264: ...s unsolicited incoming data Selectable Denial of Service DoS Distributed DoS DDoS attacks protection I IP P F Fi il lt te er rs s Depending on whether there is an existing Internet connection or in ot...

Page 265: ...xhaust all your system s resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system The DoS Defense function enables...

Page 266: ...here you assign the Start Filter Set only Also you can configure the Log Flag settings Apply IP filter to VPN incoming packets and Accept incoming fragmented UDP packets Click Firewall and click Gene...

Page 267: ...e transmitting through Vigor router will be filtered by firewall If the firewall system e g content filter server does not make any response pass or block for these packets then the router s firewall...

Page 268: ...ttings are explained as follows Item Description Filter Select Pass or Block for the packets that do not match with the filter rules Sessions Control The number typed here is the total sessions of the...

Page 269: ...le settings created in CSM Web Content Filter for applying with this router Please set at least one profile for anti virus in CSM Web Content Filter web page first Or choose Create New from the drop d...

Page 270: ...not stable small value will be proper Session timeout Setting timeout for sessions can make the best utilization of network resources Backup Firewall Click Backup to save the firewall configuration R...

Page 271: ...Active to enable the rule Available settings are explained as follows Item Description Filter Rule Click a button numbered 1 7 to edit the filter rule Click the button will open Edit Filter Rule web p...

Page 272: ...a several setting pages Advance Mode Allow to configure detailed settings of filter rule To use Wizard Mode simple do the following steps 1 Click the Wizard Mode radio button 2 Click Index 1 The setti...

Page 273: ...tion Port when the first and last value are the same it indicates one port when the first and last values are different it indicates a range for the port and available for this service type when the f...

Page 274: ...age first Or choose Create New from the drop down list in this page to create a new profile For troubleshooting needs you can specify to record information for URL Content Filter by checking the Log b...

Page 275: ...Vigor2133 Series User s Guide 263 4 After choosing the mechanism click Next to get the summary page for reference 5 If there is no error click Finish to complete wizard setting...

Page 276: ...ength is 14 character long Index 1 15 Set PCs on LAN to work at certain time interval only You may choose up to 4 schedules out of the 15 schedules pre defined in Applications Schedule setup The defau...

Page 277: ...ress Single Address Range Address Subnet Address as the Address Type and type them in this dialog In addition if you want to use the IP range from defined groups or objects please choose Group and Obj...

Page 278: ...ts except the range defined here are available for this service type the port number greater than this value is available the port number less than this value is available for this profile Service Gro...

Page 279: ...information refer to the section of APP Enforcement profile setup For troubleshooting needs you can specify to record information for IM P2P by checking the Log box It will be sent to Syslog server Pl...

Page 280: ...processed Please use the drop down list to choose a codepage If you do not have any idea of choosing suitable codepage please open Syslog From Codepage Information of Setup dialog you will see the re...

Page 281: ...filtered by firewall settings configured by Vigor router When the resource is inadequate the packets will be blocked if Strict Security Checking is enabled If Strict Security Checking is not enabled t...

Page 282: ...rom the Internet has exceeded the defined value the Vigor router will start to randomly discard the subsequent TCP SYN packets for a period defined in Timeout The goal for this is prevent the TCP SYN...

Page 283: ...unction The Vigor router will ignore any IP packets with IP option field in the datagram header The reason for limitation is IP option appears to be a vulnerability of the security for the LAN because...

Page 284: ...the packets The Vigor routers will block any packets realizing this attacking activity Block ICMP Fragment Check the box to activate the Block ICMP fragment function Any ICMP packets with more fragme...

Page 285: ...Vigor2133 Series User s Guide 273...

Page 286: ...cription Mode To have a firewall rule test specify the service type ICMP UDP TCP of the packet and type of the IP address IPv4 IPv6 Direction Set the way from WAN or from LAN that Vigor router receive...

Page 287: ...rection from Computer A to B or from the B to A for the second packet Protocol It displays the mode selected above and the sate If required click the mode link to configure advanced setting The common...

Page 288: ...s User s Guide 276 The following figure shows the test result after clicking Analyze Processing state for the fuctions MAC Filter QoS User management etc related to the firewall will be displayed by g...

Page 289: ...168 1 20 accessing to Internet through Vigor router Others e g 192 168 1 31 and 192 168 1 32 outside the range can get the source from LAN only The way we can use is to set two rules under Firewall Fo...

Page 290: ...Filter Rule 7 If Block If No Further Match for is selected for Filter the firewall of the router would check the packets with the rules starting from Rule 3 to Rule 7 The packets not matching with the...

Page 291: ...Type 192 168 1 10 in the field of Start IP and type 192 168 1 20 in the field of End IP Then click OK to save the settings The computers within the range can access into the Internet 7 Now check the...

Page 292: ...Series User s Guide 280 8 Both filter rules have been created Click OK Now all the settings are configured well Only the computers with the IP addresses within 192 168 1 10 192 168 1 20 can access to...

Page 293: ...cks the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can preve...

Page 294: ...will be applied in Default Rule of Firewall General Setup for filtering Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Profile Display the numbe...

Page 295: ...s 15 characters Select All Click it to choose all of the items in this page Clear All Uncheck all the selected boxes Enable Check the box to select the APP to be blocked by Vigor router Adv A button u...

Page 296: ...Vigor2133 Series User s Guide 284 Below shows the items which are categorized under Protocol The items categorized under P2P...

Page 297: ...Vigor2133 Series User s Guide 285 The items categorized under OTHERS...

Page 298: ...ious codes from web pages It s very common that malicious codes conceal in the executable objects such as ActiveX Java Applet compressed files and other executable files Once downloading these types o...

Page 299: ...ter will block all the packages that match with the conditions specified in URL Access Control and Web Feature below When you choose this setting both configuration set in this page for URL Access Con...

Page 300: ...Action This setting is available only when Either URL Access Control First or Either Web Feature First is selected Pass Allow accessing into the corresponding webpage with the keywords listed on the...

Page 301: ...re it will be processed with reverse action Cookie Check the box to filter out the cookie transmission from inside to outside world to protect the local user s privacy Proxy Check the box to reject an...

Page 302: ...have to click Activate to satisfy your request Be aware that service provider matching with Vigor router currently offers a period of time for trial version for users to experiment If you want to purc...

Page 303: ...and suitable server Test a site to verify whether it is categorized Click this link to do the verification Set to Factory Default Click this link to retrieve the factory settings Administration Messag...

Page 304: ...er under Profile to open the following web page The items listed in Categories will be changed according to the different service providers If you have and activate another web content filter license...

Page 305: ...ries listed on the box below Block restrict accessing into the corresponding webpage with the categories listed on the box below If the web pages do not match with the specified feature set here it wi...

Page 306: ...8 8 8 8 If the router server is used DNS Filter General Setting will be applied to DNS query from clients on LAN However if the external DNS server is used DNS Filter Profile will be applied to DNS qu...

Page 307: ...l be recorded in Syslog All All the actions Pass and Block will be recorded in Syslog WCF Set the filtering conditions UCF Set the filtering conditions Black White List Specify IP address subnet mask...

Page 308: ...everal useful services such as Anti Spam Web Content Filter Anti Intrusion and etc to filtering the web pages for the sake of protecting your system To access into MyVigor for getting more information...

Page 309: ...es User s Guide 297 2 Click the Activate link A login page for MyVigor web site will pop up automatically 3 Click the link of Create an account now 4 Check to confirm that you accept the Agreement and...

Page 310: ...Vigor2133 Series User s Guide 298 5 Type your personal information in this page and then click Continue 6 Choose proper selection for your computer and click Continue...

Page 311: ...ART 8 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 9 Click the Activate my Account link to enable the account that you created The fol...

Page 312: ...d 11 Now click Login Your account has been activated You can access into MyVigor server to activate the service e g WCF that you want C Cr re ea at te e a an n A Ac cc co ou un nt t v vi ia a M My yV...

Page 313: ...onfirm that you accept the Agreement and click Accept 3 Type your personal information in this page and then click Continue 4 Choose proper selection for your computer and click Continue 5 Now you hav...

Page 314: ...ation email with the title of New Account Confirmation Letter from myvigor draytek com 7 Click the Activate my Account link to enable the account that you created The following screen will be shown to...

Page 315: ...password that you just created in the fields of UserName and Password Then type the code in the box of Auth Code according to the value displayed on the right side of it Now click Login Your account h...

Page 316: ...lt te er r There are two ways to block the facebook service Web Content Filter and URL Content Filter Web Content Filter Benefits Easily and quickly implement the category website that you want to blo...

Page 317: ...Vigor2133 Series User s Guide 305 2 Open CSM Web Content Filter Profile to create a WCF profile Check Social Networking with Action Block 3 Enable this profile in Firewall General Setup Default Rule...

Page 318: ...RL Content Filter A Block the web page containing the word of Facebook 1 Open Object Settings Keyword Object Click an index number to open the setting page 2 In the field of Contents please type faceb...

Page 319: ...configured from the drop down list in the field of URL Content Filter Now users cannot open any web page with the word facebook inside B Disallow users to play games on Facebook 1 Open Object Setting...

Page 320: ...page 4 Configure the settings as the following figure 5 When you finished the above steps please open Firewall General Setup 6 Click the Default Rule tab Choose the profile just configured from the d...

Page 321: ...Vigor2133 Series User s Guide 309...

Page 322: ...Vigor2133 Series User s Guide 310 This page is left blank...

Page 323: ...ng Configuration Backup Syslog Mail Alert Time and Date Management Reboot System Firmware Upgrade and Activation It is used to control the bandwith of data transmission through configuration of Sessio...

Page 324: ...etup there are several items that you have to know the way of configuration System Status TR 069 Administrator Password User Password Login Page Greeting Configuration Backup Syslog Mail Alert Time an...

Page 325: ...d information from this presentation Available settings are explained as follows Item Description Model Name Display the model name of the router Firmware Version Display the firmware version of the r...

Page 326: ...ay the connection type IP Address Display the IP address of the WAN interface Default Gateway Display the assigned IP address of the default gateway IPv6 Address Display the IPv6 address for LAN Scope...

Page 327: ...e g VigorACS Available settings are explained as follows Item Description Tr069 Click Enable to activate the settings on this page ACS Server On Choose the interface for the router connecting to ACS...

Page 328: ...st to the server for the purpose of maintaining the binding in the Gateway Please type a number as the minimum period The default setting is 60 seconds Maximum Keep Alive Period If STUN is enabled the...

Page 329: ...hours for CPE to send a notification of bandwidth utilization to VigorACS WAN Choose the WAN interface for applying the bandwidth utilization notification mechanism Threshold Level Set the percentage...

Page 330: ...ord Type in the new password again Password Strength Display the security strength of the password specified above Administrator Local User The administrator can login web user interface of Vigor rout...

Page 331: ...it on the field of User Name Later click Edit to update the information Delete If the local user listed on the box above is not satisfied simply click the username and click Delete to remove it Enabl...

Page 332: ...or password Password Type in new password in this field The length of the password is limited to 31 characters Confirm Password Type in the new password again Password Strength Display the security st...

Page 333: ...ng screen will appear Simply click OK 4 Log out Vigor router web user interface by clicking the Logout button 5 The following window will be open to ask for username and password Type the new user pas...

Page 334: ...ith User Mode will be shown as follows Settings to be configured in User Mode will be less than settings in Admin Mode Only basic configuration settings will be available in User Mode Info Setting in...

Page 335: ...Item Description Enable Check this box to enable the login customization function Login Page Title Type a brief description e g Welcome to DrayTek which will be shown on the heading of the login dial...

Page 336: ...Vigor2133 Series User s Guide 324...

Page 337: ...tem Maintenance Configuration Backup The following page will be popped up as shown below Available settings are explained as follows Item Description Restore Choose File Click it to specify a file to...

Page 338: ...for downloading Periodicity backup Set the circle duration for backup Backup after change configuration Backup will be executed whenever the configuration is changed Support Model List Web configurati...

Page 339: ...ing examples The Mac or Linux platform will appear different windows but the backup function is still available Info Backup for Certification must be done independently The Configuration Backup does n...

Page 340: ...328 2 Click Choose File button to choose the correct configuration file for uploading to the router 3 Click Restore button and wait for few seconds the following picture will tell you that the restor...

Page 341: ...ement If there is no name here simply lick the link to access into System Maintenance Management to set the router name Server IP Hostname The IP address of the Syslog server Destination Port Assign a...

Page 342: ...eck this box to activate this function while using e mail application User Name Type the user name for authentication Password Type the password for authentication Enable E mail Alert Check the box to...

Page 343: ...1 3 From the Syslog screen select the router you want to monitor Be reminded that in Network Information select the network adapter used to connect to the router Otherwise you won t succeed in retriev...

Page 344: ...ect to inquire time information from Time Server on the Internet using assigned protocol Time Server Type the web site of the time server Priority Choose Auto or IPv6 First as the priority Time Zone S...

Page 345: ...Available settings are explained as follows Item Description Enable SNMP Agent Check it to enable this function Get Community Set the name for getting community by typing a proper character The defaul...

Page 346: ...community Trap Timeout The default setting is 10 seconds Enable SNMPV3 Agent Check it to enable this function USM User USM means user based security mode Type a username which will be used for authent...

Page 347: ...CVM Access Control and Device Management The management pages for IPv4 and IPv6 protocols are different F Fo or r I IP Pv v4 4 Available settings are explained as follows Item Description Router Name...

Page 348: ...user defined port numbers for the Telnet HTTP HTTPS FTP TR 069 and SSH servers Default Ports Check to use standard port numbers for the Telnet and HTTP servers TLS SSL Encryption Setup Enable SSL 3 0...

Page 349: ...Check the box es to specify Disable PING from the Internet Check the checkbox to disable all PING packets from the Internet For security issue this function is enabled by default Access List from the...

Page 350: ...e several servers provided by the system which allow you to manage the router from LAN interface Check the box es to specify Apply To Subnet Check the LAN interface for the administrator to use for ac...

Page 351: ...illuminate or blink continuously to show the status of the various functions in the router However they can be configured to remain off at all times or remain off until a button is pressed to wake the...

Page 352: ...Wake up LED button on this page press the Wireless On Off WPS button on the front panel press the Factory Reset button on the front panel LEDs are awake To put them to sleep immediately press the LED...

Page 353: ...disable the ability of the Wireless button to control WLAN and WPS functions Disabling the wireless button only prevents it from being used to control WLAN functions It can still be used to wake up th...

Page 354: ...to refresh the page to display the latest information Port The number corresponds to the LAN port number shown on the front panel Enable Deselect to disable the LAN port The default value is enabled S...

Page 355: ...self signed certificate is signed with its own private key The self signed certificate will be applied in SSL VPN HTTPS and so on In addition it can be created for free by using a wide variety of tool...

Page 356: ...Vigor2133 Series User s Guide 344...

Page 357: ...dule web page and you can use the number that you have set in that web page If you want to reboot the router using the current configuration check Using current configuration and click Reboot Now To r...

Page 358: ...w wa ar re e U Up pg gr ra ad de e Click System Maintenance Firmware Upgrade to proceed to firmware upgrade Click Select to specify the one you just download When the above page appears click Upgrade...

Page 359: ...mechanism for your computer Click System Maintenance Activation to open the following page for accessing http myvigor draytek com Available settings are explained as follows Item Description Activate...

Page 360: ...Vigor2133 Series User s Guide 348 Below shows the successful activation of Web Content Filter...

Page 361: ...traffic can be throttled back to a lower speed If there s no defined priority to specify which packets should be discarded or in another term dropped from an overflowing queue packets of sensitive app...

Page 362: ...the backbone will do the same checking before executing treatments in order to ensure service level consistency throughout the whole QoS enabled network However each node may take different attitude...

Page 363: ...the Bandwidth Management menu click Sessions Limit to open the web page To activate the function of limit session for IPv4 and or IPv6 simply click Enable and set the default session limit Available s...

Page 364: ...c limitation you set for each index Add Adds the specific session limitation onto the list above Edit Allows you to edit the settings for the selected limitation Delete Remove the selected settings ex...

Page 365: ...activate the function of limit bandwidth IP Routed Subnet Check this box to apply the bandwidth limit to the second subnet specified in LAN General Setup It is available for IPv4 settings only Disabl...

Page 366: ...tation onto the list above Edit Allow you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limitation list Allow auto adjustment Check this box to m...

Page 367: ...ll influence Class 1 Class2 Class 3 Others Display the bandwidth percentage for each class UDP Bandwidth Control Display the UDP bandwidth control is enabled or not Online Statistics Display an online...

Page 368: ...y click the Edit link to access into next for configuration You can configure general setup for the WAN interface edit the Class Rule and edit the Service Type for the Class Rule for your request O On...

Page 369: ...the Online Statistics link appearing on this page WAN Inbound Bandwidth It allows you to set the connecting rate of data input for other WAN For example if your ADSL supports 1M of downstream and 256K...

Page 370: ...ation of QoS It is suggested to set the bandwidth value for inbound outbound as 80 85 of physical network speed provided by ISP to maximize the QoS performance E Ed di it t t th he e C Cl la as ss s R...

Page 371: ...urce address For Single Address you have to fill in Start IP address For Range Address you have to fill in Start IP address and End IP address For Subnet Address you have to fill in Start IP address a...

Page 372: ...of that one and click Edit to open the rule edit page for modification E Ed di it t t th he e S Se er rv vi ic ce e T Ty yp pe e f fo or r C Cl la as ss s R Ru ul le e 1 To add a new service type edi...

Page 373: ...ter finishing all the settings here please click OK to save the configuration By the way you can set up to 10 service types If you want to edit delete an existed service type please select the radio b...

Page 374: ...tbond bandwidth and bandwidth ratio Vigor router can perform the bandwidth management for the protocols streaming remote control web HD and so on Click Bandwidth Management APP QoS to open the followi...

Page 375: ...elect all of the protocols Apply to all Choose one of the actions from the drop down list It is prepared for applying to all protocols Apply Click it to make the selected action be applied all of the...

Page 376: ...elps you to well allocate the bandwidth upon your demand of Voice Video or Data transferring Let s see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below Scenario...

Page 377: ...5 In the pop up window choose Range Address as the Address Type and type the start IP address and end IP address in relational fields Click OK to save the settings and exit the window 6 Click OK again...

Page 378: ...me steps to add class rules for IPTV and Data Email with IP addresses as shown below and 9 Assuming you get 2MB 512Kb Internet line You can click the Setup link of WAN1 to set up the bandwidth for dif...

Page 379: ...page check the box of Enable the QoS Control Type 30 50 and 15 in the boxes for VoIP IPTV and Data Email respectively Check the box of Enable UDP Bandwidth Control 11 Click OK to save the settings Th...

Page 380: ...either be redirected to specific URLs or be shown messages when they first connect to the Internet through the router Users could be required to read and agree to terms and conditions or authenticate...

Page 381: ...Enable Check the box to enable the profile Comments Shows the description of the profile Login Mode Shows the login mode used by the profile See the section Login Mode for details Applied Interface S...

Page 382: ...the Internet S So oc ci ia al l L Lo og gi in n The following page will appear when users attempt to access the Internet for the first time via the router After authenticating themselves using either...

Page 383: ...User s Guide 371 S So oc ci ia al l o or r P PI IN N L Lo og gi in n This login mode presents both Social Login and PIN Code Login modes to the users and allows them to select their preferred mode of...

Page 384: ...ined as follows Item Description Enable this profile Check to enable this profile Comments Enter a brief description to identify this profile Choose Login Method Select the desired Login Mode Save and...

Page 385: ...33 Series User s Guide 373 2 2 B Ba ac ck kg gr ro ou un nd d If you have selected a Login Mode that requires authentication select a background for the login page Available settings are explained as...

Page 386: ...elect the background color of the login panel from the predefined color list or select Customize Color and enter the RGB value Click Preview to preview the selected color Opacity 10 100 Available when...

Page 387: ...elcome message Terms and Conditions Description Enter the text to be displayed as the Terms and Conditions hyperlink text Terms and Conditions Content Enter the text to be displayed in the Terms and C...

Page 388: ...c ci ia al l L Lo og gi in n a an nd d P PI IN N L Lo og gi in n This section describes the Login Page setup step if you have selected PIN Login and or Social Login as the Login Mode You will see only...

Page 389: ...structions on obtaining an APP ID Facebook APP Secret Enter the secret configured for the APP ID entered above Refer to section A 1 How to create a Facebook App ID for Web Portal Authentication for de...

Page 390: ...rovider used to send PIN notifications SMS providers are configured in Objects Setting SMS Mail Service Object Enter PIN Description Enter message to be displayed in the PIN textbox to prompt the user...

Page 391: ...to the next page Cancel Click to abort the configuration process and return to the profile summary page 2 2n nd d s st ta ag ge e P Pa ag ge e f fo or r P PI IN N L Lo og gi in n If you have selected...

Page 392: ...tem Description Back Button Description Enter text for the label of the hyperlink to return to the previous page PIN Code Message Enter text to be displayed as the body text on the page Default Countr...

Page 393: ...summary page 4 4 W Wh hi it te el li is st t S Se et tt ti in ng g In this step you can configure the whitelist settings Users are allowed to send and receive traffic that satisfies whitelist settings...

Page 394: ...the configuration on this page and proceed to the next page Cancel Click to abort the configuration process and return to the profile summary page 5 5 M Mo or re e O Op pt ti io on ns s In this step...

Page 395: ...he operating system s built in Captive Portal Detection Landing Page After Authentication Specifies the webpage that will be displayed after the user has successfully authenticated Fixed URL The user...

Page 396: ...ment introduces how to create Facebook APP and generate the APP ID and APP secret that can be used in Web Portal setup 1 Register as FB Developer Go to https developers facebook com and login the FB a...

Page 397: ...igor2133 Series User s Guide 385 6 Add a New App Click on My Apps Add a New App Choose Website platform 7 Click Skip and Create App ID on first use Type Display Name Choose Category Click Create App I...

Page 398: ...Vigor2133 Series User s Guide 386 8 Pops up security check window select the answer and then click Submit to finish the process...

Page 399: ...Add Platform on My Apps Go to Settings then click Add Platform 11 Choose Website in Select Platform window 12 Enter the Site URL as http portal draytek com Note If you change http port in the vigor pl...

Page 400: ...8 13 Set up Client OAuth Go to Settings Advanced Client OAuth Settings enter http portal draytek com in Valid OAuth redirect URIs and save changes 14 Go to My Apps Status Review and switch available s...

Page 401: ...Vigor2133 Series User s Guide 389...

Page 402: ...LAN clients by their Google or Facebook account This document introduces how to create Facebook APP and generate the APP ID and APP secret that can be used in Web Portal setup 1 Create Developer proj...

Page 403: ...er name Set Authorized JavaScript origins and Authorized redirect URLs as http portal draytek com and click Create Note If you change http port in the vigor please add http port in URLs For example we...

Page 404: ...t wireless coverage will be clearly indicated through simulated signal strength A AP P M Ma ai in nt te en na an nc ce e Vigor router can execute configuration backup configuration restoration firmwar...

Page 405: ...the settings summary of the access point Device Name The name of the AP managed by Vigor router will be displayed here IP Address Display the true IP address of the access point SSID Display the SSID...

Page 406: ...ed up Version Display the firmware version used by the access point Password Vigor2133 can get related information of the access point by accessing into the web user interface of the access point This...

Page 407: ...y such wireless profile Security Display the security mode selected by such wireless profile Multi SSID Enable means multiple SSIDs more than one are active Disable means only SSID1 is active WLAN ACL...

Page 408: ...pplied to the selected access point immediately Later the access point will reboot To Local WLAN Profile configured in this page is specified for VigorAP connected to Vigor router If required these se...

Page 409: ...th he e w wi ir re el le es ss s L LA AN N p pr ro of fi il le e 1 Select the WLAN profile index number 1 to 5 you want to edit 2 Click the index number link to display the following page Info The fun...

Page 410: ...Vigor2133 Series User s Guide 398 3 After finished the general settings configuration click Next to open the following page for 2 4G wireless security settings...

Page 411: ...ove web page configuration click Next to open the following page for 5G wireless security settings 5 When you finished the above web page configuration click Finish to exit and return to the first pag...

Page 412: ...eboot can be performed to more than one AP at one time by using Vigor2133 Available settings are explained as follows Item Description Action There are four actions provided by Vigor router to manage...

Page 413: ...action V VI I 4 4 4 4 T Tr ra af ff fi ic c G Gr ra ap ph h Click Traffic Graph to open the web page Choose one of the managed Access Points LAN A or LAN B daily or weekly for viewing data transmissio...

Page 414: ...ting to the access point The purpose is to prevent lots of stations connecting to access point at the same time and causing traffic unbalanced Please define the required station number for WLAN 2 4GHz...

Page 415: ...ngth if it is less than When the access point is overload e g reaching the limit of station number or limit of network traffic it will terminate the network connection of the client s station with the...

Page 416: ...ev vi ic ce es s Available settings are explained as follows Item Description External Device Syslog Check this box to display information of the detected device on Syslog External Device Auto Discove...

Page 417: ...Vigor2133 Series User s Guide 405 When you finished the configuration click OK to save it Info Only DrayTek products can be detected by this function...

Page 418: ...Vigor2133 Series User s Guide 406 This page is left blank...

Page 419: ...ress service type keyword file extension and others These pre defined objects can be applied in CSM USB device connected on Vigor router can be regarded as a server or WAN interface By way of Vigor ro...

Page 420: ...ries User s Guide 408 V VI II I 1 1 O Ob bj je ec ct ts s S Se et tt ti in ng gs s Define objects such as IP address service type keyword file extension and others These pre defined objects can be app...

Page 421: ...range usually will be applied in configuring router s settings therefore we can define them with objects and bind them with groups for using conveniently Later we can select that object group that can...

Page 422: ...Subnet Address Mac Address or all that IP object with the selected type will be shown on this page Set to Factory Default Clear all profiles Search Type a string of the IP object that you want to sea...

Page 423: ...without any input data to your hard disk Download Download the CSV file from Vigor router and store in your hard disk Restore IP Object Select Click it to specify a predefined CSV file Restore Import...

Page 424: ...if this object contains Mac address MAC Address Type the MAC address of the network card which will be controlled Start IP Address Type the start IP address for Single Address type End IP Address Type...

Page 425: ...ws Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new profile please do the step...

Page 426: ...ove will be shown in this box Selected IP Objects Click button to add the selected IP objects in this box 3 After finishing all the settings here please click OK to save the configuration V VI II I 1...

Page 427: ...veral IPv6s within a range Select Subnet Address if this object contains one subnet for IPv6 address Select Any Address if this object contains any IPv6 address Select Mac Address if this object conta...

Page 428: ...ings are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new...

Page 429: ...v6 Objects Click button to add the selected IPv6 objects in this box 3 After finishing all the settings please click OK to save the configuration V VI II I 1 1 5 5 S Se er rv vi ic ce e T Ty yp pe e O...

Page 430: ...columns are available for TCP UDP protocol It can be ignored for other protocols The filter rule will filter out any port number when the first and last value are the same it indicates one port when t...

Page 431: ...6 6 S Se er rv vi ic ce e T Ty yp pe e G Gr ro ou up p This page allows you to bind several service types into one group Available settings are explained as follows Item Description Set to Factory De...

Page 432: ...ngs are explained as follows Item Description Name Type a name for this profile Maximum 15 characters are allowed Available Service Type Objects All the available service objects that you have added o...

Page 433: ...t 200 keyword object profiles for choosing as black white list in CSM URL Web Content Filter Profile Available settings are explained as follows Item Description Set to Factory Default Clear all profi...

Page 434: ...are explained as follows Item Description Name Type a name for this profile e g game Maximum 15 characters are allowed Contents Type the content for such profile For example type gambling as Contents...

Page 435: ...t in CSM URL Web Content Filter Profile Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure N...

Page 436: ...elected Keyword objects in this box 3 After finishing all the settings please click OK to save the configuration V VI II I 1 1 9 9 F Fi il le e E Ex xt te en ns si io on n O Ob bj je ec ct t This page...

Page 437: ...s 2 The configuration page will be shown as follows Available settings are explained as follows Item Description Profile Name Type a name for this profile The maximum length of the name you can set is...

Page 438: ...ce Each item is explained as follows Item Description Set to Factory Default Clear all of the settings and return to factory default settings Index Display the profile number that you can configure Pr...

Page 439: ...name Type a user name that the sender can use to register to selected SMS provider The maximum length of the name you can set is 31 characters Password Type a password that the sender can use to regis...

Page 440: ...router offers several SMS service provider to offer the SMS service However if your service provider cannot be found from the service provider list simply use Index 9 and Index 10 to make customized S...

Page 441: ...o selected SMS provider The maximum length of the password you can set is 31 characters Quota Type the total number of the messages that the router will send out Sending Interval Type the shortest tim...

Page 442: ...SMTP Port Type the port number for SMTP server Sender Address Type the e mail address of the sender Use SSL Check this box to use port 465 for SMTP server for some e mail server uses https as the tra...

Page 443: ...t ti io on n O Ob bj je ec ct t This page allows you to set ten profiles which will be applied in Application SMS Mail Alert Service You can set an object with different monitoring situation To set a...

Page 444: ...cription Profile Name Type a name for such notification profile The maximum length of the name you can set is 15 characters Category Display the types that will be monitored Status Display the status...

Page 445: ...are explained as follows Item Description Add Click it to open the following page for adding a new string object Set to Factory Default Click it to clear all of the settings in this page Index Displa...

Page 446: ...Log into the web user interface of Vigor router 2 Configure relational objects first Open Object Settings SMS Mail Server Object to get the following page Index 1 to Index 8 allows you to choose the b...

Page 447: ...e event conditions of the notification 6 Choose any index number e g Index 1 in this case to configure conditions for sending the SMS In the following page type the name of the profile and check the D...

Page 448: ...SMS Then type the phone number in the field of Recipient the one who will receive the SMS 9 Click OK to save the settings Later if one of the WAN connections fails in your router the system will send...

Page 449: ...P Pr ro ov vi id de er r Choose one of the Index numbers 9 or 10 allowing you to customize the SMS Provider In the web page type the URL string of the SMS provider and type the username and password...

Page 450: ...er clients on LAN can access write and read data stored in USB storage disk with different applications After setting the configuration in USB Application you can type the IP address of the Vigor rout...

Page 451: ...USB storage disk into the Vigor router please make sure the memory format for the USB storage disk is FAT16 or FAT32 It is recommended for you to use FAT32 for viewing the filename completely FAT16 c...

Page 452: ...ters Both them cannot contain any of the following Workgroup Name Type a name for the workgroup Host Name Type the host name for the router Printer Server Enable Click it to make Vigor router act as a...

Page 453: ...d for FTP firmware upgrade usage Note FTP Passive mode is not supported by Vigor Router Please disable the mode on the FTP client Password Type the password for FTP SMB users for accessing FTP server...

Page 454: ...disk into the USB interface of the Vigor router Otherwise you cannot save the configuration V VI II I 2 2 3 3 F Fi il le e E Ex xp pl lo or re er r File Explorer offers an easy way for users to view...

Page 455: ...Available settings are explained as follows Item Description Connection Status If there is no USB device connected to Vigor router No Disk Connected will be shown here Disk Capacity It displays the t...

Page 456: ...communications room is overheating During summer in particular it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures The inclus...

Page 457: ...t Choose the display unit of the temperature There are two types for you to choose Alarm Settings Enable Syslog Alarm The temperature log will be recorded on Syslog if it is enabled Upper temperature...

Page 458: ...es User s Guide 446 V VI II I 2 2 6 6 M Mo od de em m S Su up pp po or rt t L Li is st t Such page provides the information about the brand name and model name of the USB modems which are supported by...

Page 459: ...Guide 447 V VI II I 2 2 7 7 S SM MB B C Cl li ie en nt t S Su up pp po or rt t L Li is st t SMB Client Support List provides the test status information for applications with file sharing operated un...

Page 460: ...USB Applicaiton File Explorer If it is necessary for you to delete copy files on the device or write paste files to the devcie it must be done through SMB server or FTP server SMB service is based on...

Page 461: ...SB User Management Click Enable to enable FTP User account Here we add a new account user1 and assign authorities Read Write and List to it 4 Click OK to save the configuration 5 Make sure the FTP ser...

Page 462: ...SB Application USB Disk Status The information for FTP server will be shown as below Now users in LAN of Vigor2133 can access into the USB storage device by typing ftp 192 168 1 1 on any browser They...

Page 463: ...51 P Pa ar rt t V VI II II I T Tr ro ou ub bl le es sh ho oo ot ti in ng g This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and...

Page 464: ...low to check your basic installation status stage by stage Checking if the hardware status is OK or not Checking if the network connection settings on your computer are OK or not Pinging the router fr...

Page 465: ...1 1 1 D Di ia al l o ou ut t T Tr ri ig gg ge er ri in ng g Click Diagnostics and click Dial out Triggering to open the web page The internet connection e g PPPoE is triggered by a package sending fr...

Page 466: ...ide 454 V VI II II I 1 1 2 2 R Ro ou ut ti in ng g T Ta ab bl le e Click Diagnostics and click Routing Table to open the web page Available settings are explained as follows Item Description Refresh C...

Page 467: ...dress Resolution Protocol cache held in the router The table shows a mapping between an Ethernet hardware address MAC Address and an IP address Available settings are explained as follows Item Descrip...

Page 468: ...ping between an Ethernet hardware address MAC Address and an IPv6 address This information is helpful in diagnosing network problems such as IP address conflicts etc Click Diagnostics and click IPv6 N...

Page 469: ...CP Table to open the web page Available settings are explained as follows Item Description Index It displays the connection item number IP Address It displays the IP address assigned by this router fo...

Page 470: ...ble settings are explained as follows Item Description Private IP Port It indicates the source IP address and port of local PC Pseudo Port It indicates the temporary port of the router used for NAT Pe...

Page 471: ...nd displayed on Diagnostics DNS Cache Table Available settings are explained as follows Item Description Clear Click this link to remove the result on the window Refresh Click it to reload the page Wh...

Page 472: ...escription IPV4 IPV6 Choose the interface for such function Ping to Use the drop down list to choose the destination that you want to ping IP Address Type the IP address of the Host IP that you want t...

Page 473: ...P session limit before invoking Data Flow Monitor If not a notification dialog box will appear to remind you enabling it Click Diagnostics and click Data Flow Monitor to open the web page You can clic...

Page 474: ...ied PC accessing into Internet within 5 minutes Unblock The device with the IP address will be blocked for five minutes The remaining time will be shown on the session column Click it to cancel the IP...

Page 475: ...k Reset to zero the accumulated RX TX received and transmitted data of WAN Click Refresh to renew the graph at any time The horizontal axis represents time Yet the vertical axis has different meanings...

Page 476: ...dress of the host in the box and click Run The result of route trace will be shown on the screen or Available settings are explained as follows Item Description IPv4 IPv6 Click one of them to display...

Page 477: ...ailable settings are explained as follows Item Description Enable Web Syslog Check this box to enable the function of Web Syslog Syslog Type Use the drop down list to specify a type of Syslog to be di...

Page 478: ...for each event V VI II II I 1 1 1 13 3 I IP Pv v6 6 T TS SP PC C S St ta at tu us s IPv6 TSPC status web page could help you to diagnose the connection status of TSPC If TSPC has configured properly...

Page 479: ...vironment to find out if there is any abnormal connection Information of IP traced and destination port used for SYN Flood UDP Flood and ICMP Flood attacks will be detected and shown respectively on d...

Page 480: ...age will be blocked forever Available settings are explained as follows Item Description White Passing IP List Black Blocking IP List Type the IP address in this field and click Add It will be added t...

Page 481: ...e Vigor router analyze how multiple packets in a specified file will be sent by a route policy Packet Information Specify the nature of the packets to be analyzed by Vigor router ICMP UDP TCP ANY Spec...

Page 482: ...of analyzing The analyzed result will be shown on the page If required click export analysis to export the result as a file Note that the analysis was based on the current load balance route policy s...

Page 483: ...hardware status 1 Check the power line and WLAN LAN cable connections Refer to I 2 Hardware Installation for details 2 Turn on the router Make sure the Activity LED blink once per second and the corr...

Page 484: ...he link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s Info The example is based on Windows 7 As to the examples...

Page 485: ...r2133 Series User s Guide 473 4 Select Internet Protocol Version 4 TCP IP and then click Properties 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally clic...

Page 486: ...ide 474 F Fo or r M Ma ac c O OS S 1 Double click on the current used Mac OS on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop d...

Page 487: ...g the router correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista 7 The DOS command di...

Page 488: ...Vigor2133 Series User s Guide 476...

Page 489: ...on or not If not please install an additional switch for connecting both Vigor router and the modem offered by ISP Then check if the LEDs on Vigor router are on or not If the problem of LEDs cannot be...

Page 490: ...r re e R Re es se et t You can reset the router to factory default via Web page Such function is available in Admin Mode only Go to System Maintenance and choose Reboot System on the web page The foll...

Page 491: ...C Co on nt ta ac ct ti in ng g D Dr ra ay yT Te ek k If the router still cannot work correctly after trying many efforts please contact your dealer for further help right away For any questions pleas...

Page 492: ...he difficulty is how to handle the traffics between two or more Ethernet switches Thus VLAN is suitable for some circumstances for example the rental apartment SOHO office and so on These clients may...

Page 493: ...packet as the VID of Trunk port while forwarding the packets to another switch Bridge mode of WAN P1 and P2 are doing NAT flow to access to the internet but P3 and P4 will forward the packets between...

Page 494: ...Vigor2133 Series User s Guide 482...

Page 495: ...Vigor2133 Series User s Guide 483 LAN V VL LA AN N a ap pp pl li ic ca at ti io on ns s o on n V Vi ig go or r r ro ou ut te er r Multi Subnet VLAN of LAN...

Page 496: ...ver LAN1 LAN2 LAN3 LAN4 However the traffics of the LAN port or SSID that are NOT being grouped in the same VLAN are unable to forward to each other The benefit of Port based is able to extend the wir...

Page 497: ...to be isolated from your private network due to the security considerations it can be done by above settings However a switch support VLAN function is need if VLAN Tag enabled Triple Play Multi WAN N...

Page 498: ...Vigor2133 Series User s Guide 486...

Page 499: ...dge mode with VLAN Set top box STB or the other kinds of media devices are able to attach with Port4 or Port5 of LAN Those devices that attached with Port4 or Port5 are able to access the services net...

Page 500: ...Vigor2133 Series User s Guide 488 This page is left blank...

Page 501: ...Vigor2133 Series User s Guide 489 P Pa ar rt t I IX X T Te el ln ne et t C Co om mm ma an nd ds s...

Page 502: ...Windows Features of Telnet Client has been turned on under Control Panel Programs Type cmd and press Enter The Telnet terminal will be open later In the following window type Telnet 192 168 1 1 as be...

Page 503: ...ide 491 For users using previous Windows system e g 2000 XP simply click Start Run and type Telnet 192 168 1 1 in the Open box as below Next type admin admin for Account Password And type to get a lis...

Page 504: ...PPE Profile 1 was setted T Te el ln ne et t C Co om mm ma an nd d c cs sm m a ap pp pe e s se et t It is used to configure group settings for IM P2P Protocol and Others in APP Enforcement Profile csm...

Page 505: ...2 4 0 T Te el ln ne et t C Co om mm ma an nd d c cs sm m a ap pp pe e c co on nf fi ig g It is used to display the configuration status enabled or disabled for IM P2P Protocol Other applications csm a...

Page 506: ...ac ce e It is used to configure APPE signature download interface csm appe interface AUTO WAN S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n P Pa ar ra am me et te er r D De es sc cr ri ip pt ti...

Page 507: ...filter profile S Sy yn nt ta ax x csm ucf show csm ucf setdefault csm ucf msg MSG csm ucf obj INDEX n PROFILE_NAME l P B A N uac wf csm ucf obj INDEX n PROFILE_NAME csm ucf obj INDEX p VALUE csm ucf o...

Page 508: ...f obj INDEX uac e csm ucf obj INDEX uac d csm ucf obj INDEX uac a P B csm ucf obj INDEX uac i E D csm ucf obj INDEX uac o KEY_WORD_Object_Index csm ucf obj INDEX uac g KEY_WORD_Group_Index S Sy yn nt...

Page 509: ...mp pl le e csm ucf obj 1 uac i E Log none Priority Select Bundle Pass URL Access Control Enable URL Access Control Action pass v Prevent web access from IP address No Obj NO Object Name No Grp NO Gro...

Page 510: ...eb feature d It means to disable the restriction of web feature a Set the action of web feature P or B B Block The web access meets the web feature will be blocked P Pass The web access meets the web...

Page 511: ...age MSG means the content less than 255 characters of the message itself setdefault It means to return to default settings for all of the profile obj It means to specify the object profile INDEX It me...

Page 512: ...ames Sports Travel Leisure Recreation Fashin Beauty Business Job Search Web based Emai Chat Instant Messaging Anonymizers Forums Newsgroups Computers Technology Download Sites Streaming Media Download...

Page 513: ...es Sports Travel Leisure Recreation Fashion Beauty T Te el ln ne et t C Co om mm ma an nd d c cs sm m d dn ns sf f It means to configure the settings regarding to DNS filter csm dnsf enable ON OFF csm...

Page 514: ...page to describe that the page is not allowed to be visisted ON Enable the function of displaying message page OFF Disable the function of displaying message page SHOW Display the function of displayi...

Page 515: ...ma an nd d d dd dn ns s t ti im me e Sets and displays the DDNS time S Sy yn nt ta ax x ddns time update in minutes S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description Update i...

Page 516: ...defense function for a specific attack s ATTACK_0 It means to specify a name of the following attacks ip_option tcp_flag land teardrop smurf pingofdeath traceroute icmp_frag syn_frag unknow_proto fra...

Page 517: ...ne as a fixed IP w ip address It means to assign WAN IP address for such connection Please type an IP address here for WAN port n netmask It means to assign netmask for WAN connection You have to type...

Page 518: ...MTU 1000 1440 for USB DHCP mode E Ex xa am mp pl le e internet M 1 S tcom u username p password a 0 t 1 i 0 0 0 0 WAN1 Internet Mode set to PPPoE PPPoA WAN1 ISP Name set to tcom WAN1 Username set to...

Page 519: ...ss Specify an IP address The system will set the one that you specified as the public subnet IP address E Ex xa am mp pl le e ip pubaddr ip addr public subnet IP address Now 192 168 0 1 ip pubaddr 192...

Page 520: ...eans to create a new WAN IP address remove It means to delete an existed WAN IP address IP It means the auxiliary WAN IP address Join to NAT Pool 0 disable or 1 enable index Type the index number of t...

Page 521: ...e PC must be fixed with the same LAN IP address network segment set by this command for accessing into the web user interface of the router Later modify the start addresses for the DHCP server T Te el...

Page 522: ...indicates the direction for the arp function 0 1 2 3 4 5 0 disable to accept illegal source mac address 1 enable to accept illegal source mac address 2 disable to accept illegal dest mac address 3 ena...

Page 523: ...e 1 w 1 2 c 18 v path1 T Te el ln ne et t C Co om mm ma an nd d i ip p p pi in ng g This command allows users to ping IP address of WAN1 WAN2 PVC3 PVC4 PVC5 for verifying if the WAN connection is OK o...

Page 524: ...me out 4 168 95 90 66 50ms 5 211 22 38 134 50ms 6 220 128 2 62 50ms Trace complete T Te el ln ne et t C Co om mm ma an nd d i ip p t te el ln ne et t This command allows users to access specified devi...

Page 525: ...Vigor2133 Series User s Guide 513 0 1 2 0 means disable 1 means first subnet and 2 means second subnet E Ex xa am mp pl le e ip rip 1 Set RIP LAN1...

Page 526: ...setting for specified WAN interface 1 Enable the function of setting RIP of WAN IP 0 Disable the function E Ex xa am mp pl le e ip wanrip Valid ex ip wanrip ifno e 0 1 ifno 1 WAN1 3 PVC3 4 PVC4 5 PVC...

Page 527: ...on netmask It means the netmask of the specified IP address gateway It means the gateway of the connected router ifno It means the connection interface 3 WAN1 rtype It means the type of the route defa...

Page 528: ...on off display or get more information of the T_home service query It means to set IGMP general query interval The default value is 125000 ms ppp 0 No need to set IGMP with PPP header 1 Set IGMP with...

Page 529: ...tion Off it will drop LEAVE if still clients on the same group separate It means to set IGMP packets being separated by NAT Bridge On The packets will be separated Off The packets will not be separate...

Page 530: ...and allows users to set DMZ mode ip dmzswitch off ip dmzswitch private ip dmzswitch active_trueip S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description off It means to turn off DM...

Page 531: ...access Internet through the router Unblock The specified IP can access Internet through the router add It means to add the session limits in an IP range del It means to delete the session limits in a...

Page 532: ...for this command tx It means to set transmission rate for bandwidth limit rx It means to set receiving rate for bandwidth limit shared It means that the bandwidth will be shared for the IP range E Ex...

Page 533: ...f the pair of binded one add It means to add one ip bindmac del It means to delete one ip bindmac IP It means to type the IP address for binding with specified MAC address MAC It means to type the MAC...

Page 534: ...in several commands in one line General Setup for Policy Route i value Specify an index number for setting policy route profile Value 1 to 60 1 means to get a free policy index automatically e 0 1 0 D...

Page 535: ...0 250 The default value is 150 I value Indicate the interface specified for the policy route profile Value Available interfaces include LAN1 LAN4 IP_Routed_Subnet DMZ_Subnet WAN1 WAN3 VPN_PROFILE_1 VP...

Page 536: ...because the send to interface of the matched ip policy_rt i 1 o add 1 range s 192 168 1 10 S 192 168 1 20 2 ip_range d 202 211 100 10 D 202 211 100 20 g 202 211 100 1 I WAN1 T Te el ln ne et t C Co om...

Page 537: ...nly same subnet packet z It means to update LAN DNS configuration to DNS cache E Ex xa am mp pl le e ip lanDNSRes i 1 n ftp drayTek com Configure Set1 s DomainName ftp drayTek com ip lanDNSRes i 1 n f...

Page 538: ...N2 LAN4 WAN1 WAN2 USB VPN1 VPN32 ip6 addr a LAN1 LAN2 LAN4 WAN1 WAN2 USB VPN1 VPN32 ip6 addr v LAN1 LAN2 LAN4 WAN1 WAN2 USB ip6 addr o prefix prefix length WAN1 WAN2 USB ip6 addr l prefix prefix lengt...

Page 539: ...one line a It means to show current DHCPv6 status s It means to ask the SIP S It means to ask the SIP name d It means to ask the DNS setting D It means to ask the DNS name n It means to ask NTP i It...

Page 540: ...enable disable server DUID set by Link layer and time d It means to display the client DUID A parameter It means to set authentication protocol 0 Undefine 2 delayed protocol R parameter It means to s...

Page 541: ...IPv6 address of the address pool r 1 0 It means to enable 1 or disable 0 auto_range d addr It means to set the first DNS IPv6 address D addr It means to set the second DNS IPv6 address m 1 0 It means...

Page 542: ...n means different selections Default is WAN1 n 1 WAN1 n 2 WAN2 n 3 WAN3 n X WANx M n M means to set Internet Access Mode Mandatory and n means different modes represented by 0 5 n 0 Offline n 1 PPP n...

Page 543: ...2nd DNS Server IP server IPv6 Addr t dhcp ra none It means to set ipv6 PPP WAN test mode for DHCP or RA V It means to view IPv6 Internet Access Profile k It means to dial the Tunnel on the WAN j It me...

Page 544: ...S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description s It means to add a neighbour d It means to delete a neighbour a It means to show neighbour status inet6_addr Type an IPv6 ad...

Page 545: ...Co om mm ma an nd d i ip p6 6 r ro ou ut te e This command allows you to set route for IPv6 connection S Sy yn nt ta ax x ip6 route s prefix prefix length gateway LAN1 LAN2 LAN4 WAN1 WAN2 USB VPN1 VP...

Page 546: ...data_size S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description IPV6 address Host It means to specify the IPv6 address or host for ping LAN1 LAN2 LAN4 WAN1 WAN2 USB It means to s...

Page 547: ...1 330 ms 3 2001 4DE0 A 1 330 ms 4 2001 4DE0 1000 34 1 340 ms 5 2001 7F8 1 A501 5169 1 330 ms 6 2001 4860 1 0 4B3 350 ms 7 2001 4860 8 0 2DAF 330 ms 8 2001 4860 2 0 66E 340 ms 9 Request timed out 10 2...

Page 548: ...t means to set RA default lifetime i lifetme It means to set RA min interval time sec I lifetme It means to set RA MAX interval time sec h hoplimit It means to set RA hop limit m mtu auto It means to...

Page 549: ...used to execute management through Internet index It means the number 1 2 and 3 allowed to be configured for IPv6 management remove It means to remove delete the specified index number with IPv6 setti...

Page 550: ...ws you to set IPv6 settings for WAN interface with connection type of AICCU S Sy yn nt ta ax x ip6 aiccu i ifno r ip6 aiccu i ifno s S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Desc...

Page 551: ...ax x D De es sc cr ri ip pt ti io on n Parameter Description h It is used to display the usage of such command l n It means to selete LAN interface to be set n 1 LAN1 n 2 LAN2 x LANx Default is LAN1 w...

Page 552: ...ault is show all n 1 LAN1 n 2 LAN2 4 LAN4 n 5 DMZ E Ex xa am mp pl le e ip6 lan l 1 w 1 d 2001 4860 4860 8888 o 1 f 0 s 2 Set primary WAN1 Set 1st DNS server 2001 4860 4860 8888 Set Other Option Enabl...

Page 553: ...settings add It means to add the session limit for an IPv6 range IP1 IP2 Specify a range for IPv6 addresses del It means to delete the session limit for an IPv6 range by first IP IP1 or del all E Ex...

Page 554: ...th rate is Tx 2000K Rx 8000K bps T Te el ln ne et t C Co om mm ma an nd d i ip pf f v vi ie ew w IPF users to view the version of the IP filter to view set the log flag to view the running IP filter r...

Page 555: ...og of passed packet Type 2 to display the log of blocked packet Type 3 to display the log of non matching packet p VALUE It means to setup actions for packet not matching any rule e g p 1 Type 0 to le...

Page 556: ...Non Strict QOS Class None APP Enforcement None URL Content Filter None WEB Content Filter None DNS Filter None Load Balance policy Auto select CodePage ANSI 1252 Latin I Window size 65535 Session tim...

Page 557: ...gle Address 2 Any Address 3 Range Address Example Set Subnet Address s u 0 192 168 1 10 255 255 255 0 Set Single Address s u 1 192 168 1 10 Set Any Address s u 2 Set Range Address s u 3 192 168 1 10 1...

Page 558: ...d 3 Too Short F It means the Filter action you can specify 0 Pass Immediately 1 Block Immediately 2 Pass if no further match 3 Block if no further match m value It means to set the MAC Bind IP type 0...

Page 559: ...United States 11 OEM 850 Multilingual Latin I 12 OEM 860 Portuguese 13 OEM 861 Icelandic 14 OEM 863 Canadian French 15 OEM 865 Nordic 16 ANSI OEM 874 Thai 17 ANSI OEM 932 Japanese Shift JIS 18 ANSI O...

Page 560: ...T Te el ln ne et t C Co om mm ma an nd d i ip pf f f fl lo ow wt tr ra ac ck k This command is used to set and view flowtrack sessions S Sy yn nt ta ax x ipf flowtrack set re ipf flowtrack view f ipf...

Page 561: ...lowtrack sessions state ipf flowtrack set e Current flow_enable 0 ipf flowtrack set e Curretn flow_enable 1 T Te el ln ne et t C Co om mm ma an nd d L Lo og g This command allows users to view log for...

Page 562: ...0 0 0 0 Your IP 0 0 0 0 MORE q Quit Enter New Lines Space Bar Next Page T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t f ft tp pp po or rt t This command allows users to set FTP port for manage...

Page 563: ...n nd d m mn ng gt t t te el ln ne et tp po or rt t This command allows users to set telnet port for management S Sy yn nt ta ax x mngt telnetport Telnet port S Sy yn nt ta ax x D De es sc cr ri ip pt...

Page 564: ...am mp pl le e mngt noping off No Ping Packet Out is OFF T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t d de ef fe en ns se ew wo or rm m This command can block specified port for passing throu...

Page 565: ...reference enable It means to allow the system administrators to login from the Internet disable It means to deny the system administrators to login from the Internet http https ftp telnet ssh t r069...

Page 566: ...of IP object which is allowed to acces vigor router E It means to enable 1 disable 0 a specific IP to access vigor router f It means to flush all of the settings d It means to restore the factory defa...

Page 567: ...tor can login from a specific host or network A maximum of three IPs subnet masks is allowed S Sy yn nt ta ax x mngt accesslist list mngt accesslist add index IP Object Index mngt accesslist remove in...

Page 568: ...by typing a proper name max 23 characters n IP address It means to set the IPv4 address of the host that will receive the trap community T seconds It means to set the trap timeout 0 999 V It means to...

Page 569: ...4 LAN4 IP address Type the private IP address for the specified LAN interface E Ex xa am mp pl le e msubnet addr 2 192 168 5 1 Set LAN2 subnet IP address done This setting will take effect after reboo...

Page 570: ...ool Count 50 T Te el ln ne et t C Co om mm ma an nd d m ms su ub bn ne et t d dh hc cp ps s This command allows you to enable or disable DHCP server for the subnet S Sy yn nt ta ax x msubnet dhcps 2 3...

Page 571: ...router T Te el ln ne et t C Co om mm ma an nd d m ms su ub bn ne et t g ga at te ew wa ay y This command is used to configure an IP address as the gateway used for subnet S Sy yn nt ta ax x msubnet g...

Page 572: ...es S Sy yn nt ta ax x msubnet talk 1 2 3 4 1 2 3 4 On Off S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 1 2 3 4 It means LAN interface 1 LAN1 2 LAN2 3 LAN3 4 LAN4 On Off O...

Page 573: ...d d m ms su ub bn ne et t p pp pp pi ip p This command is used to configure a starting IP address for PPP connection S Sy yn nt ta ax x msubnet pppip 2 3 4 Start IP S Sy yn nt ta ax x D De es sc cr ri...

Page 574: ...0 count 1 B node 2 P node 4 M node 8 H node msubnet nodetype 2 1 Set LAN2 Dhcp Node Type done msubnet nodetype msubnet nodetype 2 3 4 count Now LAN2 1 LAN3 0 LAN4 0 count 1 B node 2 P node 4 M node 8...

Page 575: ...t means LAN interface 2 LAN2 3 LAN3 4 LAN4 WINS IP Type the IP address as the WINS IP E Ex xa am mp pl le e msubnet secWINS 2 192 168 3 89 Set LAN2 Dhcp Secondary WINS IP done msubnet secWINS msubnet...

Page 576: ...ti io on n Parameter Description interface Available settings include LAN1 LAN4 IP_Routed_Subnet value 1000 1492 Bytes E Ex xa am mp pl le e msubnet mtu LAN1 1492 Set LAN1 subnet mtu as 1492 msubnet...

Page 577: ...define an interface for the IP object INTERFACE 0 means any INTERFACE 1 means LAN INTERFACE 3 means WAN Example object ip obj 8 i 0 s INVERT It means to set invert seletion for the object profile INV...

Page 578: ...for all profiles INDEX It means the index number of the specified group profile v It means to view the information of the specified group profile Example object ip grp 1 v n NAME It means to define a...

Page 579: ...Vigor2133 Series User s Guide 567 8 0 9 0 10 0 11 0 object ip grp 2 a 1 2 IP Group Profile 2 Name First Interface Lan Included ip object index 0 0 1 0 2 0 3 0 4 0 5 0 6 0 7 0 8 0 9 0 10 0 11 0 Set ok...

Page 580: ...ME Type a name with less than 15 characters Example object ipv6 obj 9 n bruce s INVERT It means to set invert seletion for the object profile INVERT 0 means disableing the function INVERT 1 means enab...

Page 581: ...ipv6 grp INDEX v ipv6 grp INDEX n NAME ipv6 grp INDEX a IP_OBJ_INDEX S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description setdefault It means to return to default settings for al...

Page 582: ...s sc cr ri ip pt ti io on n Parameter Description setdefault It means to return to default settings for all profiles INDEX It means the index number of the specified service object profile v It means...

Page 583: ...range 1 65565 for TCP UDP END_P type a port number to indicate destination port Example object service obj 3 d 1 100 200 E Ex xa am mp pl le e object service obj 1 n limit object service obj 1 p 255...

Page 584: ...3 0 4 0 5 0 6 0 7 0 object service grp 1 a 1 2 Service Group Profile 1 Name Grope_1 Included service object index 0 1 1 2 2 0 3 0 4 0 5 0 6 0 7 0 T Te el ln ne et t C Co om mm ma an nd d o ob bj je e...

Page 585: ...om mm ma an nd d o ob bj je ec ct t f fe e This command is used to create File Extension Object profile S Sy yn nt ta ax x object fe show object fe setdefault object fe obj INDEX v object fe obj INDE...

Page 586: ...ip bas bat com exe inf pif reg scr torrent Example object fe obj 1 e bmp E Ex xa am mp pl le e object fe obj 1 n music object fe obj 1 e Audio object fe obj 1 v Profile Index 1 Profile Name music Imag...

Page 587: ...formation of the specified SMS object profile n NAME It means to define a name for the SMS object profile NAME Type a name with less than 15 characters s Service Provider It means to specify the numbe...

Page 588: ...m ma ai il l This command is used to create mail object profile S Sy yn nt ta ax x object mail show object mail setdefault object mail obj INDEX v object mail obj INDEX n Profile Name object mail obj...

Page 589: ...Password Type a password for authentication The maximum length of the password you can set is 31 characters I Sending Interval Define the interval for the system to send the SMS out The unit is secon...

Page 590: ...rt 4 WAN Budget 2133 5 CVM 2133 status For WAN 1 Disconnected 2 Reconnected For VPN Tunnel 1 Disconnected 2 Reconnected For Temperature Alert 1 Out of Range For WAN Budget 2133 1 Limit Reached For CVM...

Page 591: ...r minute It means to set the starting time of the profile hour Must be between 0 23 minute Must be between 0 59 For example To set Start Time 10 20 type object schedule set 1 T 10 20 d hour minute It...

Page 592: ...4 18 Start Time hh mm 8 1 Duration Time hh mm 2 30 Action Force On Idle Timeout 0 minute s max 255 0 for default How Often v Weekdays Sun v Mon Tue v Wed Thu Fri Sat T Te el ln ne et t C Co om mm ma a...

Page 593: ...Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description command parameter The available commands with parameters are listed below means that you can type in several commands in one l...

Page 594: ...dware acceleration M enable disable Enable disable the multicast hardware acceleration S Show multicast table in hardware acceleration v view Show PPA_WAN_Table and PPA_LAN_Table for reference c Clean...

Page 595: ...ta ax x D De es sc cr ri ip pt ti io on n Parameter Description command parameter The available commands with parameters are listed below means that you can type in several commands in one line h Type...

Page 596: ...s It means that you can type in several commands in one line E Ex xa am mp pl le e qos setup m 3 i 9500 o 8500 r 3 20 u 1 p 50 t 1 WAN1 QOS mode is both Wan 1 is XDSL model don t need to set up Wan 1...

Page 597: ...3 9 addr1 addr2 It means Range address Please specify the IP addresses for example l 172 16 3 9 172 16 3 50 addr1 subnet It means the subnet address with start IP address Please type the subnet and t...

Page 598: ...ice t type It means protocol type 6 tcp default 17 udp 0 tcp udp 1 254 other p port It means service port The typing format must be start end ex 510 330 l List user defined types no means the index nu...

Page 599: ...1 255 255 255 0 V 192 168 2 10 100 192 168 2 1 X LAN3 192 168 3 1 255 255 255 0 V 192 168 3 10 100 192 168 3 1 X LAN4 192 168 4 1 255 255 255 0 V 192 168 4 10 100 192 168 4 1 X Route 192 168 0 1 255...

Page 600: ...Secondary DNS Not set LAN2 Primary DNS Not set LAN2 Secondary DNS Not set LAN3 Primary DNS Not set LAN3 Secondary DNS Not set LAN4 Primary DNS Not set LAN4 Secondary DNS Not set T Te el ln ne et t C...

Page 601: ...0 0 MORE q Quit Enter New Lines Space Bar Next Page T Te el ln ne et t C Co om mm ma an nd d s sh ho ow w p po or rt tm ma ap p This command displays the table of NAT Active Sessions E Ex xa am mp pl...

Page 602: ...el ln ne et t C Co om mm ma an nd d s sh ho ow w s st ta at tu us s This command displays current status of LAN and WAN connections E Ex xa am mp pl le e show status System Uptime 25 40 53 LAN Status...

Page 603: ...0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0...

Page 604: ...set access LAN or LANWAN S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description enable disable Enable or disable the SMB service show status Display current status of SMB service S...

Page 605: ...2 3 4 v It menas to view current status E Ex xa am mp pl le e srv dhcp dhcp2 l 1 e 1 srv dhcp dhcp2 v 2nd DHCP server flag status Server works on specified MAC address ON Server works on specified LAN...

Page 606: ...blic status Index MAC Address T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p d dn ns s1 1 This command allows users to set Primary IP Address for DNS Server in LAN S Sy yn nt ta ax x...

Page 607: ...d Subnet DNS must be the same as NAT Subnet DNS E Ex xa am mp pl le e srv dhcp dns2 lan1 168 95 1 1 srv dhcp dns2 lan1 DNS IP address Now 168 95 1 1 T Te el ln ne et t C Co om mm ma an nd d s sr rv v...

Page 608: ...rver S Sy yn nt ta ax x srv dhcp ipcnt srv dhcp ipcnt IP counts S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description It means to display current used IP count number IP counts It...

Page 609: ...srv dhcp startip IP address S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description It means to display current used start IP address IP address It means the IP address that you ca...

Page 610: ...ns the lease time that DHCP server can use The unit is second E Ex xa am mp pl le e srv dhcp leasetime srv dhcp leasetime Lease Time sec Now 86400 T Te el ln ne et t C Co om mm ma an nd d s sr rv v d...

Page 611: ...hcp primWINS 192 168 1 88 srv dhcp primWINS srv dhcp primWINS WINS IP address srv dhcp primWINS clear Now 192 168 1 88 T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p s se ec cW WI IN...

Page 612: ...ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p t tf ft tp p This command can set the TFTP server as the DHCP server S Sy yn nt ta ax x srv dhcp tftp TFTP server name S Sy yn nt ta ax x D De e...

Page 613: ...m option feature 1 enable 0 disable i lan number It means to specify the LAN interface 1 lan1 a all lan r routed subnet s Next Server IP Address It means to specify the IP address for the server optio...

Page 614: ...ral commands in one line e It means to enable disable such feature 1 enable 0 disable i It means to specify the private IP address of the DMZ host r It means to remove DMZ host setting v It means to d...

Page 615: ...disable 1 enable c comment It means to type the description less than 23 characters for the defined network service i local ip It means to set the IP address for local computer Local ip Type an IP add...

Page 616: ...meter Description Add idx It means to add a new port redirection table with an index number Available index number is from 1 to 40 serv name It means to type one name as service name proto It means to...

Page 617: ...0 0 2 10 0 0 0 2 11 0 0 0 2 12 0 0 0 2 13 0 0 0 2 14 0 0 0 2 15 0 0 0 2 16 0 0 0 2 17 0 0 0 2 18 0 0 0 2 19 0 0 0 2 20 0 0 0 2 Protocol 0 Disable 6 TCP 17 UDP T Te el ln ne et t C Co om mm ma an nd d...

Page 618: ...o set to factory default srv nat trigger view It will show all port trigger settings n It means the rule number for the profiles command parameter The available commands with parameters are listed bel...

Page 619: ...23 83 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 192 168 1 56 0 0 Y O01 0 0 0 0 0 0 1...

Page 620: ...to discovery status Disable No Respond to External Device Enable T Te el ln ne et t C Co om mm ma an nd d s sw wi it tc ch h n no ot t_ _r re es sp po on nd d This command is used to detect the extern...

Page 621: ...x D De es sc cr ri ip pt ti io on n Parameter Description idx It means the index number of each item shown on the table The range is from 1 to 8 f It means to clear all of the data E Ex xa am mp pl le...

Page 622: ...Type a new name for local user Password Type a password for local user delete INDEX Delete a local user account view INDEX Show the user account password detail information E Ex xa am mp pl le e sys...

Page 623: ...s to display current profile version and status E Ex xa am mp pl le e sys cfg status Profile version 3 0 0 Status 1 0x4845af2c sys cfg default T Te el ln ne et t C Co om mm ma an nd d s sy ys s c cm m...

Page 624: ...the system The maximum number of characters that you can set is 39 clear It means to remove the domain name of the system E Ex xa am mp pl le e sys domainname wan1 clever sys domainname wan2 intelleg...

Page 625: ...y ys s n na am me e This command can set and remove the name for the router when DHCP mode is selected for WAN S Sy yn nt ta ax x sys name wan1 ASCII string sys name wan1 clear S Sy yn nt ta ax x D De...

Page 626: ...reboot T Te el ln ne et t C Co om mm ma an nd d s sy ys s a au ut to or re eb bo oo ot t This command allows users to restart the router automatically within a certain time S Sy yn nt ta ax x sys aut...

Page 627: ...t C Co om mm ma an nd d s sy ys s q qr ry yb bu uf f This command can display the system memory status and leakage list E Ex xa am mp pl le e sys qrybuf System Memory Status and Leakage List Buf sk_bu...

Page 628: ...ffer polling is on sys pollbuf off Buffer polling is off T Te el ln ne et t C Co om mm ma an nd d s sy ys s b br ri it ta as sk k This command can improve triple play quality S Sy yn nt ta ax x sys br...

Page 629: ...m It means to get parameter notification value setnoti parm value It means to set parameter notification value log It means to display the TR 069 log debug on off on turn on the function of sending de...

Page 630: ...F_VoIP InternetGatewayDevice X_00507F_WirelessLAN InternetGatewayDevice X_00507F_System InternetGatewayDevice X_00507F_Status InternetGatewayDevice X_00507F_Diagnostics MORE q Quit Enter New Lines Spa...

Page 631: ...le commands with parameters are listed below means that you can type in several commands in one line e 0 1 Enable 1 or disable 0 the function of RTSP ALG p 0 1 Set the listening port 1 65535 for RTSP...

Page 632: ...n time setting regser It means the license register server setting licera It means to erase license setting licifno It means license and signature download interface setting lic_wiz set reg qry It mea...

Page 633: ...isable 0 daylight saving t 0 1 2 Specify the saving type for daylight setting 0 Default 1 Time range 2 Yearly s year month day hour Set the detailed settings of the starting day for time range type ye...

Page 634: ...the DNS cache table 0 No limit N Greater than or equal to 5 c Clear the DNS cache table E Ex xa am mp pl le e sys dnsCacheTbl l DNS Cache Table List sys dnsCacheTbl t 65 Set TTL limit 65 seconds When...

Page 635: ...ameter Description command parameter The available commands with parameters are listed below means that you can type in several commands in one line e 0 1 Enable 1 or disable 0 the mail alert function...

Page 636: ...Disable Mode Limited T Te el ln ne et t C Co om mm ma an nd d s sy ys s t ti im me e This command is used to configure system time and date S Sy yn nt ta ax x sys time server domain sys time inquire...

Page 637: ...00 Athens Istanbul Minsk 38 GMT 02 00 Jerusalem 39 GMT 02 00 Harare Pretoria 40 GMT 03 00 Volgograd 41 GMT 03 00 Baghdad Kuwait Riyadh 42 GMT 03 00 Nairobi 43 GMT 03 00 Moscow St Petersburg 44 GMT 03...

Page 638: ...e commands with parameters are listed below means that you can type in several commands in one line command 0 Front Panel 1 System Information 2 IPv4 LAN Information 3 IPv4 Internet Access 4 IPv6 Inte...

Page 639: ...ExternalPort 21 PortMapProtocol TCP The tmpvirtual server index 0 PortMapLeaseDuration 0 PortMapEnabled 0 Ftp Example MICROSOFT 1 InternalClient 0 0 0 0 RemoteHost 0 0 0 0 InternalPort 0 ExternalPort...

Page 640: ...ow all UPnP services subscribed E Ex xa am mp pl le e upnp on UPNP start upnp subscribe 1 serviceType urn schemas microsoft com service OSInfo 1 2 serviceType urn schemas upnp org service WANCommonInt...

Page 641: ...This command is use to display the information about the brand name and model name of the USB modems which are supported by Vigor router E Ex xa am mp pl le e usb devstat USB Port1 No device USB Port...

Page 642: ...e el ln ne et t C Co om mm ma an nd d v vi ig gb br rg g s se et t This command is to configure specified WAN as bridge mode S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n vigbrg set v IP versio...

Page 643: ...a at tu us s This command can display the existed WAN connection status for the modem change from ADSL router into bridge modem including index number MAC address Stamp Time PVC VLAN port for Vigor Br...

Page 644: ...4 s1 s2 s3 s4 3 V V V T Te el ln ne et t C Co om mm ma an nd d v vl la an n o of ff f This command allows you to disable VLAN function S Sy yn nt ta ax x vlan off E Ex xa am mp pl le e vlan off VLAN i...

Page 645: ...rrent status for VLAN S Sy yn nt ta ax x vlan status E Ex xa am mp pl le e vlan status VLAN is Enable VLAN Enable VID Pri p1 p2 p3 p4 s1 s2 s3 s4 subnet 0 OFF 0 0 1 LAN1 1 OFF 0 2 1 LAN1 2 OFF 0 0 1 L...

Page 646: ...de E Ex xa am mp pl le e vlan submode status vlan subnet mode normal mode vlan submode on vlan subnet mode modified to promiscuous mode vlan submode status vlan subnet mode promiscuous mode T Te el ln...

Page 647: ...id 1 4095 VLAN1 vid 4095 T Te el ln ne et t C Co om mm ma an nd d v vl la an n s sy ys sv vi id d This command is used to modify and show the scope reserved 78 of the VLAN IDs used internally by the s...

Page 648: ...al for main mode auto index It means to choose default proposals proposal index It means to choose specified proposal aggressive It means the chosen DH group for aggressive mode pfs It means perfect f...

Page 649: ...p on off It means to enable or disable the authentication with mOTP function on Enable off Disable pin_secret pin secret It means to set PIN code with secret pin Type the code for authentication e g 1...

Page 650: ...key on off It means to enable disable the pre shared key for IKE authentication method on enable off disable assignkey Pre_Shared_Key Assign the pre shared key Pre_Shared_Key Type a string digsig on o...

Page 651: ...means LAN1 2 it means LAN2 3 it means LAN3 4 it means LAN4 E Ex xa am mp pl le e vpn subnet 1 2 T Te el ln ne et t C Co om mm ma an nd d v vp pn n s se et tu up p This command allows users to setup V...

Page 652: ...rofile name It means the name of the profile ip It means the IP address to dial to usr pwd It means the user and the password required for the L2TP connection nip nmask It means the remote network IP...

Page 653: ...nnpkt It means the NetBios Naming Packet on Enable the function to pass the packet off Disable the function to block the packet dir It means the call direction Available settings are b o and i b Both...

Page 654: ...espaa means ESP AES without with Authentication sch It means Index 1 15 in Schedule Setup sch 1 3 5 7 Set schedule 1 3 5 7 rcallb It means Require Remote to Callback rcallb on off means to enable dis...

Page 655: ...IP Direction rip d means to set RIP Direction as Disable rip t means to set RIP Direction as TX rip r means to set RIP Direction as RX rip b means to set RIP Direction as Both mode It means the option...

Page 656: ...vpn list index all vpn list index com vpn list index out vpn list index in vpn list index net S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description all It means to list configurat...

Page 657: ...keep alive off T Te el ln ne et t C Co om mm ma an nd d v vp pn n r re em mo ot te e This command allows users to enable or disable PPTP IPSec L2TP VPN service S Sy yn nt ta ax x vpn remote PPTP IPSe...

Page 658: ...ounts L2l means LAN to LAN Profile Specify which one will be applied by NetBios index The index number of the profile Block Pass Pass Have an inquiry for data transmission between the hosts located on...

Page 659: ...et 1 1400 VPN TCP maximum segment size MSS PPTP 1400 L2TP 1360 IPSec 1360 L2TP over IPSec 1360 vpn mss show VPN TCP maximum segment size MSS PPTP 1400 L2TP 1360 IPSec 1360 L2TP over IPSec 1360 T Te el...

Page 660: ...s coming from the second subnet passing through current used VPN tunnel S Sy yn nt ta ax x vpn pass2nd on vpn pass2nd off S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description on...

Page 661: ...mber of VPN profile E 0 1 It means to enable disable the IpsecWithSameSubnet 0 Disable 1 Enable e 1 2 3 4 It means to translate LAN subnet to virtual subnet 1 LAN1 2 LAN2 3 LAN3 4 LAN4 I IP address Se...

Page 662: ...just the size of MTU for WAN1 S Sy yn nt ta ax x wan mtu value S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description value It means the number of MTU for PPP The available range i...

Page 663: ...ti io on n Parameter Description on off It means to enable or disable DF E Ex xa am mp pl le e wan DF_check on DF bit check enable wan DF_check off DF bit check disable reset DF bit T Te el ln ne et t...

Page 664: ...Bps 0 Primary DNS 0 0 0 0 Secondary DNS 0 0 0 0 PVC_WAN3 Offline stall N Mode Up Time 00 00 00 IP GW IP TX Packets 0 TX Rate Bps 0 RX Packets 0 RX Rate Bps 0 PVC_WAN4 Offline stall N Mode Up Time 00 0...

Page 665: ...trace route If you do not set any value for ttl here or just type 0 here the system will use default setting 255 as the ttl value interval Interval Set the interval between each ping operation Availab...

Page 666: ...e priority for the VALN setting Range is from 0 to 7 px It means LAN port Available setting number is from 2 to 4 Port number 1 is locked for NAT usage keeptag It means Multi VLAN packets will keep th...

Page 667: ...nable Specified WAN interface will be tagged Disable Disable the function of tagging on WAN interface pri value It means the priority for such VLAN The value shall be 0 7 stat Display current VLAN sta...

Page 668: ...D De es sc cr ri ip pt ti io on n Parameter Description I Host IP address Specify the IPv6 target to detect If can be an IPv4 address or domain name Host IP address Type the IP address domain name of...

Page 669: ...lean It means to clean all access control setting E Ex xa am mp pl le e wl acl showmode ssid1 none ssid2 none ssid3 none ssid4 none wl acl add 00 50 70 ff 12 70 Set Done wl acl add 00 50 70 ff 12 70 s...

Page 670: ...function at the same time 0 disable the function 1 enable the funciton ssid ssid_num enable ssid_name hidden_ssid It means to set the name of the SSID hide the SSID if required ssid_num Type 1 2 3 or...

Page 671: ...sid 1 enable dray SSID Enable Hide_SSID Name 1 1 0 dray Note Please restart wireless after you set the parameters wl config security 1 wpa1x Configured Wlan Security Setting SSID1 Mode wpa1x Wireless...

Page 672: ...ers to perform AP scanning S Sy yn nt ta ax x wl scan start wl scan set wlist blist stime MAC wl scan del wlist blist MAC wl scan filter ssid channel mac wl scan show 0 1 2 3 S Sy yn nt ta ax x D De e...

Page 673: ...tamgt show ssid_num wl stamgt set ssid_num c r wl stamgt reset ssid_num S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description enable disable It means to enable disable the station...

Page 674: ...nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description wl wpa Type 1 2 3 to represent different WPA modes 1 means WPA WPA2 2 means WPA2 Only 3 means WPA Only E Ex xa am mp pl le e wl wpa 1...

Page 675: ...Txop It means transmission opportunity Specify the value ranging from 0 to 65535 ACM It can restrict stations from using specific category class if it is enabled 0 disable 1 enable E Ex xa am mp pl l...

Page 676: ...for GI_800 and 1 for GI_4001 wl ht badecline value The value you can type is 0 for disabling and 1 for enabling wl ht autoba value The value you can type is 0 for disabling and 1 for enabling wl ht rd...

Page 677: ...tings are d Disable b Bridge r Repeapter security value It means to configure security mode with encrypted keys for WDS mode Available settings are disable No security wep WEP wpapsk key WPA PSK wpa2p...

Page 678: ...This command allows you to enable or disable wireless button control S Sy yn nt ta ax x wl btnctl value S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description value 0 disable 1 ena...

Page 679: ...rtfns enable value wl artfns trg_num value wl artfns show S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description enable value It means to enable wireless airtime fairness function...

Page 680: ...t xx xx xx xx xx xx or xx xx xx xx xx xx or xx xx xx xx xx xx isolate It means to isolate the wireless connection of the wireless client identified with the MAC address from LAN del MAC It means to de...

Page 681: ...wl_dual apscan show 5G Access Point List BSSID Channel SSID T Te el ln ne et t C Co om mm ma an nd d w wl l_ _d du ua al l c ca ar rd dm ma ac c E Ex xa am mp pl le e wl_dual cardmac Card MAC 54 2a a2...

Page 682: ...instead of long preamble with 128 bit sync field However some original 11b wireless network devices only support long preamble 0 disable to use long preamble 1 enable to use long preamble preamble sho...

Page 683: ...ans to display the status of wireless isolation E Ex xa am mp pl le e wl_dual config mode 11a Current mode is 11a Note Please restart 5G wireless after you set the channel wl_dual config channel 60 Cu...

Page 684: ...eys must be in 5 13 ASCII text string or 10 26 Hexadecimal digit format WPA keys must be in 8 63 ASCII text string or 64 Hexadecimal digit format show It means to display current mode selection for ea...

Page 685: ...e value It means to specify connection mode for WDS value Available settings are d Disable b Bridge r Repeapter security value It means to configure security mode with encrypted keys for WDS mode Avai...

Page 686: ...rst wl_dual wds hello 1 Note Please restart router after you set the parameters wl dual wds mode b wl dual wds security wep wl_dual wds show 5G Wireless WDS Setting Mode Bridge Security WEP AP Functio...

Page 687: ...apcli show wl_dual apcli enable value wl_dual apcli security mode wl_dual apcli ssid ssid_name wl_dual apcli bssid S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description show Displ...

Page 688: ...ln ne et t C Co om mm ma an nd d w wl l_ _d du ua al l a ar rt tf fn ns s This command allows users to configure airtime fairness function for wireless 5GHz connection S Sy yn nt ta ax x wl_dual artfn...

Page 689: ...Enable 1 or disable 0 the RADIUS server authport port number Configure the port number for authentication Port number Available range is from 0 to 65535 Default value is 1812 set_auth_method method i...

Page 690: ...s Subnets will be eligible to pass through NAT and wake up the LAN client You also need to set NAT rule for LAN client S Sy yn nt ta ax x wol up MAC Address wol fromWan on off any wol fromWan_Setting...

Page 691: ...e the user name that you want to get clear corresponding record all all of the records will be removed d Set User management function in Rule Based mode e Set User management function in User Based mo...

Page 692: ...time quota of the user profile e g q 200 r Param It means to set data quota e g r 1000 s Param It means to set schedule index Available settings are sch_idx1 sch_idx2 sch_idx3 and sch_idx4 t Param It...

Page 693: ...00 r It means to set account data quota e g r 1000 t It means to enable disable time quota limitation for user account 0 Disable 1 Enable w It means to set data quota unit MB GB E Ex xa am mp pl le e...

Page 694: ...et to Enable appqos traceable e 68 2 TELNET ENABLED QoS Class 2 T Te el ln ne et t C Co om mm ma an nd d n na an nd d b ba ad d n na an nd d u us sa ag ge e NAND usage is used to display NAND Flash us...

Page 695: ...l ln ne et t C Co om mm ma an nd d a ap pm m p pr ro of fi il le e This command allows to configure wireless profiles to be used in Central AP Management S Sy yn nt ta ax x apm profile clone from inde...

Page 696: ...eCtrl U D 0 Default DrayTek LAN A WPA WPA2 PSK x DrayTek LAN B WPA WPA2 PSK x 1 2 forcarrie DrayTek Disable x 3 4 T Te el ln ne et t C Co om mm ma an nd d a ap pm m c ca ac ch he e This command is use...

Page 697: ...traffic limit 0 disable traffic limit 4 The forth number means the limit num of station Available range is 3 64 5 The fifth number means the upload limit function 1 enable upload limit 0 disable uplo...

Page 698: ...56 09 syslog APM Send Rogue AP Detection data 8d 03 00 42 kernel 60 fa cd 55 f5 ea had disassociated 8d 03 03 12 syslog APM Run AP Detection Discovery 8d 03 06 09 syslog APM Send Rogue AP Detection d...

Page 699: ...apm stanum 1 Idx Nearby 2 4 5G Conn 2 4 5G 1 2 5 0 0 2 2 5 1 0 3 2 5 1 0 T Te el ln ne et t C Co om mm ma an nd d b ba ac ck ku up pm mo od de e This command is used to backup the firmware to the rou...

Page 700: ...Interfaces 100 Apply the Class Rule 102 APSD Capable 176 ARP Cache Table 431 ARP Detect 45 47 ARP Table 95 Auth Type 122 Authentication Mode 171 Auto Logout 15 Auto ULA Prefix 87 Auto Update interval...

Page 701: ...ifier 48 DHCP Server Configuration 80 82 84 DHCP Server IP Address 80 82 DHCP Table 433 DHCPv6 Stateful 86 DHCPv6 Server 87 Diagnostics 428 429 Dial out Triggering 429 Digital Signature 190 204 Displa...

Page 702: ...General Setup 199 IPsec Tunnel 203 IPTV 67 IPv4 Border Relay 62 IPv4 Mask Length 63 IPv6 Address 59 IPv6 Gateway Address 59 IPv6 Group 393 IPv6 Neighbour Table 432 IPv6 Object 391 IPv6 TSPC Status 44...

Page 703: ...195 Physical Connection 22 Physical Members 65 Physical Mode 41 42 43 Physical Type 41 42 PIN Code 224 Ping Detect 45 47 52 54 56 57 59 60 63 Ping Diagnosis 436 Ping Gateway IP 45 47 Ping Interval 45...

Page 704: ...ver Address 50 Server Certificate 222 Server IP Address 130 Server Response 122 Service 116 Service Activation Wizard 34 Service API 121 Service Name 107 Service Provider 121 404 Service Type Group 39...

Page 705: ...cal Address ULA configuration 87 UPnP 118 131 URL Access Control 273 URL Content Filter 245 266 URL Content Filter Profile 271 URL Redirect 99 USB Application 414 USB Device Status 419 USB General Set...

Page 706: ...er 245 266 Web Content Filter Profile 275 Web Feature 274 Web Portal Setup 98 177 WEP 157 166 white black list 167 Wildcard 122 Wired 802 1x 97 Wireless LAN 155 Wireless Wizard 159 Wizard Mode 248 WLA...