Draytek Vigor2862 Series User Manual Download | Manualshive

Page: 457 / 988

background image

Vigor2862 Series User’s Guide

441

V

V

I

I

-

-

1

1

-

-

3

3

D

D

e

e

f

f

e

e

n

n

s

s

e

e

S

S

e

e

t

t

u

u

p

p

As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defense function in

the DoS Defense setup. The DoS Defense functionality is disabled for default.

V

V

I

I

-

-

1

1

-

-

3

3

-

-

1

1

D

D

o

o

S

S

D

D

e

e

f

f

e

e

n

n

s

s

e

e

Click Firewall and click DoS Defense to open the setup page.

Available settings are explained as follows:

Item Description

Enable Dos Defense

Check the box to activate the DoS Defense Functionality.
Select All - Click this button to select all the items listed
below.
White/Black List Option – Set white/black list of IPv4/IPv6
address.

Enable SYN flood defense

Check the box to activate the SYN flood defense function.

Once detecting the Threshold of the TCP SYN packets from
the Internet has exceeded the defined value, the Vigor

router will start to randomly discard the subsequent TCP
SYN packets for a period defined in Timeout. The goal for

this is prevent the TCP SYN packets’ attempt to exhaust the
limited-resource of Vigor router.
By default, the threshold and timeout values are set to
2000 packets per second and 10 seconds, respectively. That

means, when 2000 packets per second received, they will
be regarded as “attack event” and the session will be

paused for 10 seconds.

«
...
455
456
457
458
459
...
»

Summary of Contents for Vigor2862 Series

Page 1: ......

Page 2: ...Vigor2862 Series User s Guide ii Vigor2862 Series VDSL2 Security Firewall User s Guide Version 1 5 Firmware Version V3 9 0 For future update please visit DrayTek web site Date January 18 2019...

Page 3: ...arrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep yo...

Page 4: ...5 3 Quick Access for Common Used Menu 27 I 5 4 GUI Map 28 I 5 5 Web Console 29 I 5 6 Config Backup 30 I 5 7 Logout 30 I 5 8 Online Status 31 I 5 8 1 Physical Connection 31 I 5 8 2 Virtual WAN 33 I 6 Q...

Page 5: ...113 II 1 2 17 Details Page for IPv6 Static IPv6 in WAN1 WAN2 114 II 1 2 18 Details Page for IPv6 6in4 Static Tunnel in WAN1 WAN2 116 II 1 2 19 Details Page for IPv6 6rd in WAN1 WAN2 118 II 1 3 Multi P...

Page 6: ...lity 220 II 5 12 2 Config Sync 223 II 5 13 Local 802 1X General Setup 225 Application Notes 227 A 1 How to use High Availability 227 A 2 How to use DrayDDNS 235 A 3 How to Implement the LDAP AD Authen...

Page 7: ...9 Bandwidth Management 310 III 1 10 AP Discovery 311 III 1 11 Airtime Fairness 312 III 1 12 Band Steering 314 III 1 13 Roaming 318 III 1 14 Station List 319 Part IV VoIP 321 IV 1 VoIP 322 Web User Int...

Page 8: ...igor Routers via IKEv2 403 V 2 SSL VPN 406 Web User Interface 407 V 2 1 General Setup 407 V 2 2 User Account 408 V 2 3 User Group 412 V 2 4 SSL Portal Online User 414 V 3 Certificate Management 415 We...

Page 9: ...uration Backup 491 VII 1 7 Syslog Mail Alert 495 VII 1 8 Time and Date 497 VII 1 9 SNMP 498 VII 1 10 Management 500 VII 1 11 Panel Control 504 VII 1 12 Self Signed Certificate 508 VII 1 13 Reboot Syst...

Page 10: ...VII 5 1 General Setup 589 VII 5 1 1 General Settings 589 VII 5 1 2 IPsec VPN Settings 590 VII 5 2 CPE Management 591 VII 5 2 1 Managed Device List 591 VII 5 2 2 CPE Maintenance 594 VII 5 2 3 Google M...

Page 11: ...t List 648 VII 8 Central Management External Devices 649 Part VIII Others 651 VIII 1 Objects Settings 652 Web User Interface 653 VIII 1 1 IP Object 653 VIII 1 2 IP Group 657 VIII 1 3 IPv6 Object 658 V...

Page 12: ...9 Data Flow Monitor 709 XI 1 10 Traffic Graph 712 XI 1 11 VPN Graph 713 XI 1 12 Trace Route 714 XI 1 13 Syslog Explorer 715 XI 1 14 IPv6 TSPC Status 716 XI 1 15 DSL Status 717 XI 1 16 High Availabili...

Page 13: ...Vigor2862 Series User s Guide xiii Index 962...

Page 14: ......

Page 15: ...P Pa ar rt t I I I In ns st ta al ll la at ti io on n This part will introduce Vigor router and guide to install the device in hardware and software...

Page 16: ......

Page 17: ...outside and control inside Object based firewall is flexible and allows your network be safe User Management implemented on your router firmware can allow you to prevent any computer from accessing y...

Page 18: ...The QoS function is inactive On USB device is connected and ready for use Off No USB device is connected USB1 2 USB Blinking The data is transmitting On The router is ready to access Internet through...

Page 19: ...connected with 10 100Mbps Switch on Rear Side Available for Vigor2862L Interface Description Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and...

Page 20: ...The data is transmitting On The QoS function is active QoS Off The QoS function is inactive On USB device is connected and ready for use Off No USB device is connected USB Blinking The data is transmi...

Page 21: ...need to setup WPS within 2 minutes On The VPN tunnel is active Off VPN services are disabled VPN Blinking Traffic is passing through VPN tunnel On The DMZ function is enabled Off The DMZ function is...

Page 22: ...ssed and released the button twice 2 4G Off and 5G Off pressed and released the button three times When WPS function is enabled by web user interface press this button for more than 2 seconds to wait...

Page 23: ...ll blink slowly while wireless traffic goes through ACT and WLAN LEDs blink quickly and simultaneously when WPS is working and will return to normal condition after two minutes You need to setup WPS w...

Page 24: ...ice making network connection through WPS Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT L...

Page 25: ...alled on the extension base before connecting to Vigor router There are two mounting holes for installing antennas with extension base on Vigor router Please install them as shown below Note if only o...

Page 26: ...the left side There are two types of antennas provided for Vigor2862Ln Vigor2862Lac which must be installed in different locations carefully and correctly Wrong installation might cause bad signal of...

Page 27: ...rter to the WAN port of router with Ethernet cable RJ 45 2 Connect one end of an Ethernet cable RJ 45 to one of the LAN ports of the router and the other end of the cable RJ 45 into the Ethernet port...

Page 28: ...rovided on the Vigor router packaging box to enable you to space the screws correctly on the wall 2 Place the template on the wall and drill the holes according to the recommended instruction 3 Fit sc...

Page 29: ...Cs connected this router can print documents via the router The example provided here is made based on Windows 7 For other Windows system please visit www DrayTek com Before using it please follow the...

Page 30: ...er s Guide 14 4 A dialog will appear Click Add a local printer and click Next 5 In this dialog choose Create a new port In the field of Type of port use the drop down list to select Standard TCP IP Po...

Page 31: ...User s Guide 15 6 In the following dialog type 192 168 1 1 router s LAN IP in the field of Hostname or IP Address and type 192 168 1 1 as the Port name Then click Next 7 Click Standard and choose Gene...

Page 32: ...your system will ask you to choose right name of the printer that you installed onto the router Such step can make correct driver loaded onto your PC When you finish the selection click Next 9 Type a...

Page 33: ...Vigor2862 Series User s Guide 17 10 Choose Do not share this printer and click Next 11 Then in the following dialog click Finish...

Page 34: ...uide 18 12 The new printer has been added and displayed under Printers and Faxes Click the new printer icon and click Printer server properties 13 Edit the property of the new printer you have added b...

Page 35: ...or choosing the correct protocol and LPR name The printer can be used for printing now Most of the printers with different manufacturers are compatible with vigor router Info Some printers with the fa...

Page 36: ...he same subnet as the default IP address of Vigor router 192 168 1 1 For the detailed information please refer to the later section Trouble Shooting of the guide 2 Open a web browser on your PC and ty...

Page 37: ...home page will be different slightly in accordance with the type of the router you have 5 The web page can be logged out according to the chosen condition The default setting is Auto Logout which mea...

Page 38: ...dow will open to ask for username and password 2 Please type admin admin as Username Password for accessing into the web user interface with admin mode 3 Go to System Maintenance page and choose Admin...

Page 39: ...uide 23 5 Now the password has been changed Next time use the new password to access the Web user interface for this router Info Even the password is changed the Username for logging onto the web user...

Page 40: ...status including System Information IPv4 Internet Access IPv6 Internet Access Interface physical connection Security and Quick Access Click Dashboard from the main menu on the left side of the main pa...

Page 41: ...ill be open for you to configure if required Port Color Description Black No USB device is connected USB Green A USB device is connected Black No VDSL ADSL connection Green ADSL connection is ready VD...

Page 42: ...es User s Guide 26 I I 5 5 2 2 N Na am me e w wi it th h a a L Li in nk k A name with a link e g Router Name Current Time WAN1 4 and etc below means you can click it to open the configuration page for...

Page 43: ...shboard You will find a group of common used functions grouped under Quick Access The function links of System Status Dynamic DDNS TR 069 User Management IM P2P Block Schedule Syslog Mail Alert LDAP R...

Page 44: ...ss clients displayed with Host ID IP Address and MAC address indicates that the traffic would be transmitted through LAN port s and then the WAN port The purpose is to perform the traffic monitor of t...

Page 45: ...lnet command via DOS prompt The changes made by using web console have the same effects as modified through web user interface The functions settings modified under Web Console also can be reviewed on...

Page 46: ...way to store current used settings quickly by clicking the Config Backup icon It allows you to backup current settings as a file Such configuration file can be restored by using System Maintenance Con...

Page 47: ...1 1 P Ph hy ys si ic ca al l C Co on nn ne ec ct ti io on n Such page displays the physical connection status such as LAN connection status WAN connection status ADSL information and so on P Ph hy ys...

Page 48: ...rface WAN1 WAN2 WAN3 WAN4 Status Enable Yes in red means such interface is available but not enabled Yes in green means such interface is enabled Line Displays the physical connection VDSL ADSL Ethern...

Page 49: ...led Yes in green means such interface is enabled No in red means such interface is not available Mode Displays the type of WAN connection e g TSPC Up Time Displays the total uptime of the interface IP...

Page 50: ...ard is entering login password After typing the password please click Next On the next page as shown below please select the WAN interface that you use If DSL interface is used please choose WAN1 if E...

Page 51: ...mber to all packets on the WAN while sending them out Please type the tag value and specify the priority for the packets sending by WAN1 Disable Disable the function of VLAN with tag Tag value Type th...

Page 52: ...as the protocol For ADSL Only Such field is provided for ADSL only You have to choose encapsulation and type the values for VPI and VCI Or click Auto detect to find out the best values Fixed IP Click...

Page 53: ...s Item Description Service Name Optional Enter the description of the specific network service Username Assign a specific valid user name provided by the ISP Note The maximum length of the user name y...

Page 54: ...finished the above settings click Next for viewing summary of such connection 4 Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown 5 N...

Page 55: ...to choose for WAN1 interface Choose MPoA Static or Dynamic IP as the protocol For ADSL Only Such field is provided for ADSL only You have to choose encapsulation and type the values for VPI and VCI Or...

Page 56: ...the next setting page Cancel Click it to give up the quick start wizard 2 Please type in the IP address mask gateway information originally provided by your ISP Then click Next for viewing summary of...

Page 57: ...Ethernet is selected as Physical Mode In general Auto negotiation is suggested VLAN Tag insertion The settings configured in this field are available when Ethernet is selected as Physical Mode Disable...

Page 58: ...Click PPPoE as the Internet Access Type Then click Next to continue Available settings are explained as follows Item Description Service Name Optional Enter the description of the specific network ser...

Page 59: ...into the next setting page Cancel Click it to give up the quick start wizard 3 Please manually enter the Username Password provided by your ISP Click Next for viewing summary of such connection 4 Clic...

Page 60: ...pen for you to specify Internet Access Type 2 Click PPTP L2TP as the Internet Access Type Then click Next to continue Available settings are explained as follows Item Description Username Assign a spe...

Page 61: ...y IP address for the router Second DNS Type in secondary IP address for necessity in the future PPTP Server L2TP Server Type the IP address of the server Back Click it to return to previous setting pa...

Page 62: ...pe 2 Click Static IP as the Internet Access type Simply click Next to continue Available settings are explained as follows Item Description WAN IP Type the IP address Subnet Mask Type the subnet mask...

Page 63: ...art Wizard Setup OK will appear Then the system status of this protocol will be shown 5 Now you can enjoy surfing on the Internet E Et th he er rn ne et t W WA AN N2 2 D DH HC CP P 1 Choose WAN2 as th...

Page 64: ...39 characters MAC Some Cable service providers specify a specific MAC address for access authentication In such cases you need to enter the MAC address Back Click it to return to previous setting pag...

Page 65: ...e el le es ss s 2 2 4 4G G W WA AN N2 2 S St ta at ti ic c I IP P 1 Choose WAN2 as the WAN Interface and choose Wireless 2 4G as the Physical Mode Click the Next button The following page will be open...

Page 66: ...of frequency of the Wireless AP Please notice that if this setting is modified the channel of Wireless LAN 2 4GHz would be also modified Security Mode The mode to connect to the Wireless AP Disable Th...

Page 67: ...Discovery button to choose your Wireless AP You can also set the Wireless AP information directly and skip the next 2 steps 5 Click the Scan button of the popup window and wait for a few seconds 6 Sel...

Page 68: ...the Security Mode is WEP type in the WEP Keys If the Security Mode is WPA PSK or WPA2 PSK type in the Pass Phrase Then click Next for next step 8 Click Finish A page of Quick Start Wizard Setup OK wil...

Page 69: ...HCP as the Internet Access type Simply click Next to continue Available settings are explained as follows Item Description SSID The identification of the Wireless AP MAC Address Optional The MAC Addre...

Page 70: ...d in PSK WPA2 PSK The Router connects to the wireless AP as a WPA2 client and the encryption key should be entered in PSK Back Click it to return to previous setting page Next Click it to get into the...

Page 71: ...be filled automatically If the Security Mode is WEP type in the WEP Keys If the Security Mode is WPA PSK or WPA2 PSK type in the Pass Phrase Then click Next for next step 7 Click Finish A page of Qui...

Page 72: ...ed as follows Item Description Internet Access Choose one of the selections as the protocol of accessing the internet 3G 4G USB Modem PPP mode SIM Pin code Type PIN code of the SIM card that will be u...

Page 73: ...e Force Vigor router to connect Internet with the mode specified here If you choose 4G 3G 2G as network mode the router will choose a suitable one according to the actual wireless signal automatically...

Page 74: ...use trial version of WCF directly without accessing into the server MyVigor located on http myvigor draytek com For using Web Content Filter Profile please refer to later section Web Content Filter Pr...

Page 75: ...upgrade APPE signature automatically DT DDNS developed by DrayTek offers one year free charge service of dynamic DNS service for internal use 3 Setting confirmation page will be displayed as follows p...

Page 76: ...register your Vigor router to MyVigor website for getting more service Please follow the steps below to finish the router registration 1 Please login the web configuration interface of Vigor router b...

Page 77: ...to create your own one Please read the articles on the Agreement regarding user rights carefully while creating a user account 4 The following page will be displayed after you logging in MyVigor Type...

Page 78: ...Vigor2862 Series User s Guide 62 6 After clicking OK you will see the following page Your router has been registered to myvigor website successfully...

Page 79: ...egulated and ruled by router The design of network structure is related to what type of public IP addresses coming from your ISP When the data flow passing through the Network Address Translation NAT...

Page 80: ...Vigor2862 Series User s Guide 64...

Page 81: ...private addresses and the packets will be delivered to the correct host PC in the local area network Thus all the host PCs can share a common Internet connection G Ge et t Y Yo ou ur r P Pu ub bl li...

Page 82: ...still can be used and Load Balance can be done in the router Besides 3G 4G USB Modem in WAN3 WAN4 also can be used as backup device Therefore when WAN1 and WAN2 are not available the router will use 3...

Page 83: ...n port for proper operation Please configure WAN1 WAN2 WAN3 and WAN4 settings This webpage allows you to set general setup for WAN1 WAN2 WAN3 and WAN4 respectively In default WAN2 is disabled If you w...

Page 84: ...eam and upstream rate of such WAN interface Active Mode Display whether such WAN interface is Active device or backup device Backup WAN Display the backup WAN interface for such WAN when it is disable...

Page 85: ...is detected this field will display VDSL2 if ADSL is detected it will display ADSL DSL Mode Specify the physical mode VDSL or ADSL for such router manually DSL Modem Code Choose the correct DSL modem...

Page 86: ...e Mode Active When will appear Please specify which WAN will be the Backup interface Any of the selected WAN disconnect Such backup WAN will be activated when any master WAN interface disconnects All...

Page 87: ...rface Display Name Type the description for such WAN interface Physical Mode Choose Wireless 2 4G if you want to use wireless station mode to access Internet Otherwise choose Ethernet to access Intern...

Page 88: ...lected WAN disconnect Such backup WAN will be activated when any master WAN interface disconnects All of the selected WAN disconnect Such backup WAN will be activated only when all master WAN interfac...

Page 89: ...ose Yes to invoke the settings for this WAN interface Choose No to disable the settings for this WAN interface Display Name Type the description for such WAN interface Physical Mode Display the physic...

Page 90: ...ivated as the main network connection Traffic Threshold When the data traffic of active WAN reaches the traffic threshold specified here the failover WAN will be enabled automatically to share the ove...

Page 91: ...ion the users can set different WAN settings for WAN1 WAN2 WAN3 or LTE WAN4 for Internet Access Due to different Physical Mode for WAN interface the Access Mode for these connections also varies Refer...

Page 92: ...e in WAN interface Note that Details Page will be changed slightly based on ADSL VDSL2 physical mode specified on WAN General Setup IPv6 This button will open different web page based on Physical Mode...

Page 93: ...M Mo od de e V VD DS SL L2 2 To choose PPPoE as the accessing protocol of the Internet please select PPPoE from the WAN Internet Access WAN1 page The following web page will be shown Available setting...

Page 94: ...ou choose Ping Detect as detection mode you have to type Primary or Secondary IP address in this field for pinging Ping Gateway IP If you choose Ping Detect as detection mode you also can enable this...

Page 95: ...WAN IP Alias You can set up to 8 public IP addresses other than the current one you are using Dial Out Schedule Index 1 15 in Schedule Setup You can type in four sets of time schedule for your request...

Page 96: ...settings click OK to save the settings I II I 1 1 2 2 2 2 D De et ta ai il ls s P Pa ag ge e f fo or r M MP Po oA A S St ta at ti ic c o or r D Dy yn na am mi ic c I IP P i in n W WA AN N1 1 P Ph hy...

Page 97: ...Client Identifier Check the box to specify username and password as the DHCP client identifier for some ISP Username Type a name as username The maximum length of the user name you can set is 63 char...

Page 98: ...n mode you have to type Primary or Secondary IP address in this field for pinging Ping Gateway IP If you choose Ping Detect as detection mode you also can enable this setting to use current WAN gatewa...

Page 99: ...RFC1058 specifying how routers exchange routing tables information Click Enable RIP for activating this function Bridge Mode Enable Bridge Mode If the function is enabled the router will work as a br...

Page 100: ...Modem Settings Set up the DSL parameters required by your ISP These settings configured here are specified for ADSL only Multi PVC channel The selections displayed here are determined by the page of I...

Page 101: ...her network connection is alive or not through ARP Detect or Ping Detect Mode Choose ARP Detect or Ping Detect for the system to execute for WAN detection If you choose Ping Detect as the detection mo...

Page 102: ...g it the detected value will be displayed in the field of MTU PPP MP Setup PPP Authentication Select PAP only or PAP or CHAP for PPP IP Assignment IPCP Usually ISP dynamically assigns IP address to yo...

Page 103: ...u check this box PCs on the same network can use another set of PPPoE session different with the Host PC to access into Internet For Wireless LAN It is available for n model If you check this box PCs...

Page 104: ...cessing protocol of the Internet select MPoA Static or Dynamic IP from the WAN Internet Access WAN1 page The following web page will appear Available settings are explained as follows Item Description...

Page 105: ...ifier Check the box to specify username and password as the DHCP client identifier for some ISP Username Type a name as username The maximum length of the user name you can set is 63 characters Passwo...

Page 106: ...n mode you have to type Primary or Secondary IP address in this field for pinging Ping Gateway IP If you choose Ping Detect as detection mode you also can enable this setting to use current WAN gatewa...

Page 107: ...mation Protocol is abbreviated as RIP RFC1058 specifying how routers exchange routing tables information Click Enable RIP for activating this function Bridge Mode Enable Bridge Mode If the function is...

Page 108: ...djusted in this page will be invalid ISP Access Setup Enter your allocated username password and authentication parameters according to the information provided by your ISP Username Type in the userna...

Page 109: ...c transmit path Click Detect to open the following dialog Path MTU to Type the IP address as the specific transmit path MTU size start from Determine the starting point value of the packet Default set...

Page 110: ...ed Then when a packet passes through Vigor router it will not be cancelled That is the client who sends out the packet will not be blocked by ISP Default MAC Address You can use Default MAC Address or...

Page 111: ...ly and allows you type in IP address manually Obtain an IP address automatically Click this button to obtain the IP address automatically if you want to use Dynamic IP mode More Options It shows optio...

Page 112: ...RP Detect Ping Detect or Always On for the system to execute for WAN detection If you choose Ping Detect as the detection mode you have to type required settings for the following items Primary Second...

Page 113: ...tain ISP when TTL value becomes 0 If disabled TTL value will not be reduced Then when a packet passes through Vigor router it will not be cancelled That is the client who sends out the packet will not...

Page 114: ...io button to close the connection through PPTP or L2TP Server Address Specify the IP address of the PPTP L2TP server if you enable PPTP L2TP client mode Specify Gateway IP Address Specify the gateway...

Page 115: ...y action IP Address Assignment Method IPCP WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 32 public...

Page 116: ...eb page will be shown Available settings are explained as follows Item Description Enable Disable Click Enable for activating this function If you click Disable this function will be closed and all th...

Page 117: ...ket AP Discovery Click this button to open the Access Point Discovery window Let wireless 2 4GHz do AP discovery and choose the Wireless AP you wan to connect to SSID The identification of the Wireles...

Page 118: ...as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde After finishing all the settings here please click OK to activate them I II I 1 1 2 2 9 9 D De et ta ai il ls s P Pa ag ge e...

Page 119: ...command to restrict 3G band or do any special settings The maximum length of the string you can set is 47 characters Modem Dial String Such value is used to dial through USB mode Please use the defaul...

Page 120: ...ection is on or off TTL Time to Live Set TTL value of PING operation Ping Interval Type the interval for the system to execute the PING operation Ping Retry Type the number of times that the system is...

Page 121: ...not through ARP Detect or Ping Detect Mode Choose ARP Detect or Ping Detect for the system to execute for WAN detection If you choose Ping Detect as the detection mode you have to type required settin...

Page 122: ...484 and etc automatically Detect Click it to detect a suitable MTU value Accept After clicking it the detected value will be displayed in the field of MTU Authentication Select PAP only or PAP or CHAP...

Page 123: ...fied here If you choose 4G 3G 2G as network mode the router will choose a suitable one according to the actual wireless signal automatically APN Name APN means Access Point Name which is provided and...

Page 124: ...whether network connection is alive or not through ARP Detect or Ping Detect Mode Choose ARP Detect or Ping Detect for the system to execute for WAN detection If you choose Ping Detect as the detectio...

Page 125: ...r CHAP UserName Type the username optional The maximum length of the name you can set is 47 characters Password Type the password optional The maximum length of the password you can set is 62 characte...

Page 126: ...he PPPoE mode connection which is available for the areas such as Taiwan hinet the Netherlands Australia and UK I II I 1 1 2 2 1 14 4 D De et ta ai il ls s P Pa ag ge e f fo or r I IP Pv v6 6 T TS SP...

Page 127: ...roker Type the address for the tunnel broker IP FQDN or an optional port number WAN Connection Detection Such function allows you to verify whether network connection is alive or not through Ping Dete...

Page 128: ...ssword assigned with the user name The maximum length of the password you can set is 19 characters Tunnel Broker It means a server of AICCU The server can provide IPv6 tunnels to sites or end users ov...

Page 129: ...ettings are explained as follows Item Description DHCPv6 Client Configuration IAID Type a number as IAID DUID Display the DHCP unique ID used by such WAN interface Authentication Protocol Such protoco...

Page 130: ...n this field for pinging TTL Time to Live If you choose Ping Detect as detection mode you have to type TTL value RIPng Protocol RIPng RIP next generation offers the same functions and benefits as IPv4...

Page 131: ...entry Delete Click it to remove an existed entry Current IPv6 Address Table Display current interface IPv6 address Static IPv6 Gateway Configuration IPv6 Gateway Address Type your IPv6 gateway address...

Page 132: ...ignored And all of the filter rules defined and enabled in Firewall menu will be activated Bridge Subnet Make a bridge between the selected LAN subnet and such WAN interface After finished the above...

Page 133: ...connection is alive or not through Ping Detect Mode Choose Always On or Ping Detect for the system to execute for WAN detection Always On means no detection will be executed The network connection wil...

Page 134: ...6rd prefix automatically from 6rd service provider The IPv4 WAN must be set as DHCP Static 6rd Set 6rd options manually IPv4 Border Relay Type the IPv4 addresses of the 6rd Border Relay for a given 6...

Page 135: ...ction Always On means no detection will be executed The network connection will be on always Ping IP Hostname If you choose Ping Detect as detection mode you have to type IP address in this field for...

Page 136: ...nel 2 Ethernet on WAN2 Channel 3 USB1 WAN3 Channels 5 through 10 can be bridged to one or more of the 3 LAN ports P2 through P4 In addition Channels 5 through 7 can be configured as virtual WANs WAN5...

Page 137: ...lows Item Description Enable Channel 5 6 7 Check it to enable this channel WAN Type Specify a WAN type of the PVC Channel VLAN ADSL A PVC Channel will be created using an ADSL connection on WAN1 VDSL...

Page 138: ...nnel The settings here will create a bridge between the LAN ports selected and the WAN The WAN interface of the bridge connection will be built upon the WAN type selected using the VLAN tag configured...

Page 139: ...rname password and authentication parameters according to the information provided by your ISP ISP Name PPP Service Name Enter if your ISP requires this setting otherwise leave blank Username Name pro...

Page 140: ...option to manually enter the IP address IP Address Type in the IP address Subnet Mask Type in the subnet mask Gateway IP Address Type in gateway IP address DNS Server IP Address Type in the primary IP...

Page 141: ...ype is available The user will be able to select the physical WAN interface the channel shall use here General Settings VPI Available when WAN Type is ADSL Virtual Path Identifier Contact your ISP or...

Page 142: ...g value Priority Choose the number to determine the packet priority for such VLAN The range is from 0 to 7 ATM OoS Configures the Quality of Service QoS of the ATM circuit QoS Type Select a proper QoS...

Page 143: ...te ABR Available Bit Rate nrtVBR Non real time Variable Bit Rate rtVBR Real time Variable Bit Rate PCR It represents Peak Cell Rate The default setting is 0 SCR It represents Sustainable Cell Rate The...

Page 144: ...l S Se et tu up p Or Item Description Index The WAN port Click to configure WAN Budget for a particular WAN Enable v WAN Budget is enabled on this WAN x WAN Budget is disabled on this WAN Quota The cu...

Page 145: ...system to perform when the traffic has exceeded the budget limit Shutdown WAN interface All the outgoing traffic through such WAN interface will be terminated Using Notification Object The system wil...

Page 146: ...is 7 days 20 means the whole cycle is 20 days When the time is up the router will reset the traffic record automatically Today is day Specify the day in the cycle as the starting point which Vigor rou...

Page 147: ...sage If the WAN budget is exhausted a lock will be displayed on the page if Shutdown WAN interface is selected Which means no data transmission will be carried out Moreover the system will send out a...

Page 148: ...connection which is also known as the triple play service This document is going to demonstrate how to configure the Multi PVC feature for triple play deployment There are two types of setup one is do...

Page 149: ...WAN is an ADSL line d enable Add VLAN Header and enter the VLAN Tag and Priority as the service provider requires e check Enable for Bridge Mode and select the physical port member to which you re goi...

Page 150: ...Vigor2862 Series User s Guide 134 O Op pe en n a a V Vi ir rt tu ua al l W WA AN N I In nt te er rf fa ac ce e 1 Go to WAN Multi PVC VLAN click on channel 5 6 or 7 to configure...

Page 151: ...quires d enable Open WAN Interface for this Channel and select the kind of Application will be used on this channel Note this option is only available on channel 5 7 e set up the Internet Access type...

Page 152: ...Vigor2862 Series User s Guide 136 4 Now you may use the virtual WAN interface for applications such as IGMP Proxy this can be done by selecting the WAN interface as PVC VLAN...

Page 153: ...ither of the active WAN as their path therefore the traffic load is shared across the WAN interfaces For newer models which support Session based Load Balance the router can also do WAN aggregation wh...

Page 154: ...ed in Failover mode the WAN interface will only be active when the primary WAN disconnects and will be down again when the primary WAN resume its service To configure a WAN interface in Failover mode...

Page 155: ...plement an IPv6 address on Vigor Router s WAN 1 Before configuring IPv6 on WAN please make sure the router is connected to the IPv4 Internet 2 Go to WAN Internet Access click on IPv6 of the WAN interf...

Page 156: ...k the status from the IPv6 tab on Online Status Physical Connection page 5 Furthermore Network Administrator may test the connectivity of IPv6 from the router by going to Diagnostics Ping Diagnosis an...

Page 157: ...u un nn ne el l S Se et tu up p P Pr ro ot to oc co ol l C Cl li ie en nt t In this mode the IPv6 connectivity is provided by a tunnel broker on the IPv4 Internet through a tunnel set up by Tunnel Set...

Page 158: ...for you you may configure that IPv6 address for WAN by doing the following steps 1 Set Connection Type to Static IPv6 2 Enter the IPv6 address and Prefix Length which provided by the ISP and click Add...

Page 159: ...d manually To use 6in4 Static Tunnel you need sign up for a tunnel broker service and get an IPv6 address and routed IPv6 prefixes first Then configure the router as follows 1 Set Connection Type to 6...

Page 160: ...the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assigns private IP address t...

Page 161: ...St ta at ti ic c R Ro ou ut te e When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simp...

Page 162: ...d to restrict traffic coming in and going out of the computer VLANs on the other hand are usually set up using network switches or routers such as the Vigor2862 To communicate with the hosts outside o...

Page 163: ...AN1 is configured with DHCP DHCPv6 in default If required please check the DHCP box for each LAN IP Address Display the IP address for each LAN item Such information is set in default and you can not...

Page 164: ...nter LAN Routing matrix a selected checkbox means that the 2 intersecting LANs can communicate with each other When you finish the configuration please click OK to save and exit this page Info To conf...

Page 165: ...CP server if you do not have a DHCP server for your network If you want to use another DHCP server in the network other than the Vigor Router s you can let Relay Agent help you to redirect the DHCP re...

Page 166: ...o they may have a human friendly easy to remember name such as www yahoo com The DNS server converts the user friendly name into its equivalent IP address Primary IP Address You must specify a DNS ser...

Page 167: ...DHCP and static assignment are used on a network it is important to exclude the static IP addresses from the DHCP IP pool For example if your LAN uses the 192 168 1 x subnet and you have 20 DHCP clien...

Page 168: ...the subnet Default 255 255 255 0 24 DHCP Server Configuration Disable Server Let you manually assign IP address to every host in the LAN Enable Server Let the router assign IP address to every host in...

Page 169: ...the Relay Agent can help to forward the DHCP request to the DHCP server DNS Server IP Address DNS stands for Domain Name System Every Internet host must have a unique IP address also they may have a h...

Page 170: ...the Routing Information Protocol DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network so it automatically dis...

Page 171: ...ich can be assigned deleted or edited from above pool Set a list of MAC Address for 2nd DHCP server will help router to assign the correct IP address of the correct subnet to the correct host So those...

Page 172: ...pe and refer to the following explanations for detailed information Below shows the settings page for IPv6 It provides 2 daemons for LAN side IPv6 address configuration One is SLAAC stateless and the...

Page 173: ...tion is up or not Primary DNS Sever Type the IPv6 address for Primary DNS server Secondary DNS Server Type another IPv6 address for DNS server if required Disable DNS server will not be used Managemen...

Page 174: ...odically and when requested by a node sending a Router Solicitation message These messages are required for IPv6 stateless auto configuration Disable Click it to disable router advertisement server Ho...

Page 175: ...to carry IPv6 traffic After making changes on the Advance setting page click the OK button to retain the changes and return to the LAN IPv6 Setup page Be sure to click OK on the LAN IPv6 Setup page o...

Page 176: ...h clear the data entry fields Enable Interface Option Number DataType and Data by clicking Reset After filling in the values click Add to create the new entry To add a DHCP option entry modeled after...

Page 177: ...es for LAN side QoS You can assign each of VLANs to each of the different IP subnets that the router may also be operating to provide even more isolation The said functionality is tag based multi subn...

Page 178: ...et VLAN Tag Enable Check the box to enable the function of VLAN with tag The router will add specific VLAN number to all packets on the LAN while sending them out Please type the tag value and specify...

Page 179: ...solated It is only available when the VLAN functionality is enabled In the Inter LAN Routing matrix a selected checkbox means that the 2 intersecting LANs can communicate with each other Vigor2862 ser...

Page 180: ...Series User s Guide 164 4 Click OK 5 Open LAN General Setup If you want to let the clients in both groups communicate with each other simply activate Inter LAN Routing by checking the box between LAN1...

Page 181: ...P subnets on LAN Each can be independent isolated or common able to communicate with each other This is ideal for departmental or multi occupancy applications Info As for the VLAN applications refer t...

Page 182: ...trol MAC address Click LAN and click Bind IP to MAC to open the setup page Available settings are explained as follows Item Description Enable Click this radio button to invoke this function However I...

Page 183: ...for manipulation Sort Reorder the entry based on the IP address Refresh Refresh the ARP table listed below to obtain the newest ARP table information Add or Update to IP Bind List IP Address Type the...

Page 184: ...existing list Info Before you select Strict Bind you have to bind one set of IP MAC address for one PC If not no one of the PCs can access into Internet And the web user interface of the router might...

Page 185: ...from the menu bar of the Web UI to bring up the LAN Port Mirror configuration page Available settings are explained as follows Item Description Port Mirror Enables or disables LAN Port Mirroring Mirro...

Page 186: ...ck the box to enable LAN 802 1x function Authentication Type External RADIUS An external RADIUS server is to be used for 802 1X authentication Go to Applications RADIUS TACACS External RADIUS to speci...

Page 187: ...is only supported by certain firmware version I II I 3 3 1 1 S Se et tu up p When the data traffic is heavy and data transmission is getting slowly and slowly you can configure this page to accelerate...

Page 188: ...f QoS Specific Hosts This sub item provides 5 hosts for adding NAT sessions into the PPA For the PPA only supports 128 sessions these hosts will share these sessions Therefore the performance will be...

Page 189: ...Vigor2862 Series User s Guide 173...

Page 190: ...ic IP address and the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes Save cost on applying publ...

Page 191: ...ss domain name are recognized by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the goal of...

Page 192: ...e WAN Interface Display the WAN IP address used by the profile Protocol Display the transport layer protocol TCP or UDP Public Port Display the port number which will be redirected to the specified Pr...

Page 193: ...means all the incoming data from any port will be redirected to specified range of IP address and port Public Port Specify which port can be redirected to the specified Private IP and Port of the inte...

Page 194: ...xample the built in web user interface in the router is with default port 80 which may conflict with the web server in the local network http 192 168 1 13 80 Therefore you need to change the router s...

Page 195: ...gle host in the LAN Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be tot...

Page 196: ...ivate IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from the above dialog the IP address will be show...

Page 197: ...Click this button and then a window will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in...

Page 198: ...particular entry that you want to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Enable Check the box to enable the open port prof...

Page 199: ...will be used for this entry This setting is available when WAN IP Alias is configured Private IP Enter the private IP address of the local host or click Choose PC to select one Choose IP Click this b...

Page 200: ...e configuration has taken effect open port keeps the ports opened forever Once the OK button is clicked and the configuration has taken effect port triggering will only attempt to open the ports once...

Page 201: ...ocol Display the protocol of the triggering packets Source IP Display the name of the IP object Triggering Port Display the port of the triggering packets Incoming Protocol Display the protocol for th...

Page 202: ...ease click OK to save the configuration I II I 4 4 5 5 A AL LG G ALG means Application Layer Gateway There are two methods provided by Vigor router RTSP Real Time Streaming Protocol ALG and SIP Sessio...

Page 203: ...ecified private IP address S Sc ch he ed du ul le e The Vigor router has a built in clock which can update itself manually or automatically by means of Network Time Protocols NTP As a result you can n...

Page 204: ...uter is NAT Traversal This enables applications inside the firewall to automatically open the ports that they need to pass through a router W Wa ak ke e o on n L LA AN N A PC client on LAN can be woke...

Page 205: ...D Dy yn na am mi ic c D DN NS S A Ac cc co ou un nt t 1 Assume you have a registered domain name from the DDNS provider say hostname dyndns org and an account with username test and password test 2 O...

Page 206: ...Enable Check the box to enable such account WAN Interface Display the WAN interface used Domain Name Display the domain name that you set on the setting page of DDNS setup 4 Select Index number 1 to...

Page 207: ...channel for such account Service Provider Select the service provider for the DDNS account Service Type Select a service type Dynamic Custom or Static If you choose Custom you can modify the domain t...

Page 208: ...for all Dynamic DNS providers You could get more detailed information from their websites Mail Extender If the mail server is defined with another name please type the name in this area Such mail ser...

Page 209: ...s private IP this function can detect the public IP used by the NAT router and use the detected IP address for DDNS update There are two methods offered for you to choose WAN IP If it is selected and...

Page 210: ...or2862 Series User s Guide 194 D De el le et te e a a D Dy yn na am mi ic c D DN NS S A Ac cc co ou un nt t Click the Index number you want to delete and then click Clear All button to delete the acco...

Page 211: ...you can specify specific private IP address es to correspondent servers Thus even the remote PC is adopting public DNS as the DNS server the LAN DNS resolution on Vigor2862 series will respond the spe...

Page 212: ...Available settings are explained as follows Item Description Enable Check this box to enable such profile Profile Type a name for such profile Note If you type a name here for LAN DNS and click OK to...

Page 213: ...profile just created Or you can click index 2 to use this profile as conditional DNS forwarding Available settings are explained as follows Item Description Enable Check this box to enable such profil...

Page 214: ...are explained as follows Item Description Interface There are four WAN interfaces allowed to be set with DNS security enabled Enable Check the box to enable the DNS security management Primary DNS Dis...

Page 215: ...ngs are explained as follows Item Description Domain Type the domain name or IP address IPv4 IPv6 that you want to query Interface Specify the interface required for executing diagnose DNS Server Type...

Page 216: ...In System Maintenance Time and Date menu press Inquire Time button to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is...

Page 217: ...Internet Access or VPN and Remote Access LAN to LAN settings To add a schedule 1 Click any index say Index No 1 2 The detailed settings of the schedule with index 1 will be shown below Available sett...

Page 218: ...t means the action applied such schedule will be executed every three days since the date defined on the Start Date 3 Click OK button to save the settings Example Suppose you want to control the PPPoE...

Page 219: ...cation It enables centralized remote access authentication for network management Vigor router can be operated as a RADIUS client This web page is used to configure settings for external RADIUS server...

Page 220: ...2138 Disconnect Message Port Set a port number for listenning the RADIUS disconnection message Update Interval Set a time interval for sending the accounting request to the RADIUS server RADIUS Server...

Page 221: ...eck to enable internal RADIUS client feature Authentication Port Set a port number for internal RADIUS server RADIUS Client Access List Allow to configure that clients under specified domain IPv4 and...

Page 222: ...uthentication user account and user password will be required for identity authentication Before configuring such page create at least one user profile in User Management User Profile first Select All...

Page 223: ...Description Enable Check to enable TACACS feature Server IP Address Enter the IP address of TACACS server Destination Port The UDP port number that the TACACS server is using Shared Secret The TACACS...

Page 224: ...y I II I 5 5 6 6 1 1 G Ge en ne er ra al l S Se et tu up p This page allows you to enable the function and specify general settings for LDAP server Available settings are explained as follows Item Des...

Page 225: ...follows Item Description Name Type a name for such profile The length of the user name is limited to 19 characters Common Name Identifier Type or edit the common name identifier for the LDAP server T...

Page 226: ...Vigor2862 Series User s Guide 210 After finished the above settings click OK to save and exit this page A new profile has been created...

Page 227: ...Control Service or Connection Status Service Default WAN It is used to specify the WAN interface for applying such function The reminder as regards concern about Firewall and UPnP Can t work with Fire...

Page 228: ...ent two versions v2 and v3 are supported by Vigor router Choose the correct version based on the IPTV service you subscribe General Query Interval Vigor router will periodically check which IP obtaini...

Page 229: ...g all the settings here please click OK to save the configuration I II I 5 5 8 8 2 2 W Wo or rk ki in ng g G Gr ro ou up p Available settings are explained as follows Item Description Refresh Click th...

Page 230: ...able settings are explained as follows Item Description Wake by Two types provide for you to wake up the binded IP If you choose Wake by MAC Address you have to type the correct MAC address of the hos...

Page 231: ...hat the content is and when the SMS will be sent Available settings are explained as follows Item Description Index Check the box to enable such profile SMS Provider Use the drop down list to choose S...

Page 232: ...ings SMS Mail Service Object If there is no object listed click Mail Service link to define a new one with specified service provider Mail Address Type the e mail address of the one who will receive t...

Page 233: ...n e g IP setting If the host and user s computer have the plug in bonjour driver install they can utilize the service offered by the router by clicking the router name icon In short what the Clients u...

Page 234: ...tem Maintenance Management Type a name as the Router Name and click OK 4 Next open Applications Bonjour Check the service that you want to use via Bonjour 5 Open the DNSSD page again The available ite...

Page 235: ...Vigor2862 Series User s Guide 219 6 Now any page or document can be printed out through Vigor router installed with a printer...

Page 236: ...andled by the failed component the primary router to the backup component the secondary router and the availability of network resources are preserved and partially failed transactions are recovered I...

Page 237: ...undancy Method Select the redundancy method for high availability Hot Standby Such method is suitable when there is only one ISP account When this method is selected During normal operation the second...

Page 238: ...ity ID i e the highest priority will be the primary router When multiple routers in a group are assigned the same priority ID routers with lower LAN IP addresses configured on the LAN General Setup pa...

Page 239: ...n be enabled by Hot Standby redundancy method only Config Sync Interval Day Hour Minute The primary router will synchronize its configuration with secondary routers at every specified time interval Ex...

Page 240: ...e primary device and the other Vigor2862 is the secondary device When the primary Vigor2862 breaks down the secondary device assumes the role of the primary device by taking over all responsibilities...

Page 241: ...1X server At present such feature can be used for wireless and wired 802 1x authentication User Profile Select All Click to add all User Profiles to the 802 1X server All profiles will appear under th...

Page 242: ...nal RADIUS will be changed as Disabled too even if it is enabled previously OK Click it to save the settings Clear Click it to remove previous setting configuration Cancel Click it to give up all sett...

Page 243: ...N line to dial up and continue to provide Internet service to LAN clients Active Standby mode is almost same as Hot Standby mode only that in the Active Standby mode the Primary and Secondary connect...

Page 244: ...for High Availability only and put all other LAN clients in LAN2 LAN5 e Update DDNS for dynamic WAN IP users enable this function so once the secondary router becomes primary and dials up the WAN it...

Page 245: ...l IP and the LAN IP of secondary router Again for any routers with the same Priority ID their IP addresses will be compared so we suggest to use a IP with lower number on the Primary one b Gateway IP...

Page 246: ...t IP addresses to avoid IP conflict Here is the example there are several LAN and all of them are under the protection of hardware redundancy 6 We have setup High Availability on both routers and befo...

Page 247: ...ate via the Management Interface it s required to use the ports that belong to the Management Interface LAN LAN1 in this scenario We can check for this information in LAN VLAN In this scenario we can...

Page 248: ...step 2 We may force to sync by clicking the Sync button The secondary router will reboot after the config sync 9 Now we may inspect if the secondary router received the configuration from the primary...

Page 249: ...in ng g t th he e W WC CF F L Li ic ce en ns se e 11 Now the routers are set if you have WCF license you may create a group on MyVigor so these routers can share the same license a First login to myv...

Page 250: ...under c Save the profile and we can see the group entry S Se en nd d t th he e N No ot ti if fi ic ca at ti io on n t to o N Ne et tw wo or rk k A Ad dm mi in ni is st tr ra at to or r We can set Vig...

Page 251: ...DDNS service DrayDDNS We will provide a domain name for each Vigor Router this single domain name can record IP addresses of all WAN A Ac ct ti iv va at te e D Dr ra ay yD DD DN NS S L Li ic ce en ns...

Page 252: ...ions Dynamic DNS Setup a Tick Enable Dynamic DNS Setup b Click an available profile index c Tick Enable Dynamic DNS Account d Select DrayTek Global www drayddns com as Service Provider e Select the WA...

Page 253: ...om ma ai in n N Na am me e Currently only the domain name is allowed to be modified MyVigor website We will need to register the router to MyVigor server and log in to MyVigor website to modify it 1 P...

Page 254: ...me e g XXXX25 and click Update 4 Vigor router will get the modified domain name when the it performs next DDNS updating We can click Sync domain to accelerate this process After few seconds the router...

Page 255: ...Vigor2862 Series User s Guide 239...

Page 256: ...face of the Vigor router 2 Open Applications Active Directory LDAP to get the following page for configuring LDAP related settings There are three types of bind type supported Simple Mode Just simply...

Page 257: ...Vigor2862 Series User s Guide 241 and 4 Click OK to save the settings above 5 Open User Management General Setup Select User Based as the Mode option...

Page 258: ...VPN and Remote Access PPP General Setup to check the profile s that will be authenticated with LDAP server After above configurations users belong to either rd1 or shrd group can access Internet afte...

Page 259: ...ers to update your IP to the DDNS server We will take Changeip org and 3322 net as example Before setting please make sure that the WAN connection is up P Pa ar rt t A A C Ch ha an ng ge ei ip p o or...

Page 260: ...Service API as dynamic dns update asp u jo p jo hostname j changeip org ip IP cmd update offline 0 In which IP is a value which will be replaced with the current interface IP address automatically wh...

Page 261: ...an do the same job for us automatically 1 Please go to Applications Dynamic DNS to create a profile for Customized DDNS client 4 Set the Service Provider as User Defined 5 Set the Provider Host as mem...

Page 262: ...Vigor2862 Series User s Guide 246 P Pa ar rt t C C E Ex xt te en nd d N No ot te e The customized Service Provider is also eligible with the ClouDNS net...

Page 263: ...nterface Specify Interface Through dedicated interface WAN LAN VPN the data can be sent from the source IP to the destination IP Address Mapping Allows you specify the outgoing WAN IP address es for a...

Page 264: ...ti ic c R Ro ou ut te e f fo or r I IP Pv v4 4 Available settings are explained as follows Item Description Index The number 1 to 30 under Index allows you to open next page to set up static route En...

Page 265: ...rnal Router B 192 168 1 3 have set Main Router 192 168 1 1 as the default gateway for the Router A 192 168 1 2 Before setting Static Route user A cannot talk to user B for Router A can only forward re...

Page 266: ...to enable this profile Destination IP Address Type an IP address as the destination of such static route Subnet Mask Type the subnet mask for such static route Network Interface Use the drop down lis...

Page 267: ...e static route profile Destination Address Displays the destination address of the static route Set to Factory Default Clear all of the settings and return to factory default settings Viewing IPv6 Rou...

Page 268: ...Vigor2862 Series User s Guide 252 Network Interface Use the drop down list to specify an interface for this static route When you finish the configuration please click OK to save and exit this page...

Page 269: ...ption Index Click the number of index to access into the configuration web page Enable Check this box to enable this policy Protocol Display the protocol used for this policy Interface Display the int...

Page 270: ...IP end for the specified WAN interface If this field is blank it means that all the source IPs inside the LAN will be passed through the WAN interface Destination IP Any Any IP can be treated as the d...

Page 271: ...terface chosen here 4 Specify an interface and click Next The following page will appear only if you choose WAN1 WAN7 as Interface Available settings are explained as follows Item Description Force NA...

Page 272: ...gs are explained as follows Item Description Enable Check this box to enable this policy Comment Type a brief explanation for such profile Protocol Use the drop down menu to choose a proper protocol f...

Page 273: ...e drop down list to choose a preconfigured IP object group Country Object Use the drop dwon list to choose a preconfigured object Then all IPs within that country will be treated as the destination IP...

Page 274: ...200 which means it has higher priority than the default route Failback When Failover to option is enabled Administrator could also enable Failback to clear the existing session on Failover interface a...

Page 275: ...e how a single packet will be sent by a route policy Analyze multiple packets Choose such mode to make Vigor router analyze how multiple packets in a specified file will be sent by a route policy Pack...

Page 276: ...nput File Select Click the download link to get a blank example file Then click such button to select that blank csv file for saving the result of analysis Analyze Click it to perform the job of analy...

Page 277: ...ck the box to enable basic BGP function for local router Local AS Number Set the AS number for local router Hold Time Set the time interval in seconds to determine the peer is dead when the router is...

Page 278: ...connection status for local router and neighboring router I II I 6 6 3 3 1 1 S St ta at ti ic c N Ne et tw wo or rk k This page allows you to configure up to eight neighboring routers for exchanging t...

Page 279: ...WAN IP alias IP Refer to the following figure This document introduces how to set up address mapping with Route Policy When a WAN interface has multiple public IP addresses Administrator may specify...

Page 280: ...face as WAN and then select Interface address from the drop down list The List can be edited in WAN IP Alias setting Enable Failover to other WAN so the traffic will be sent via other Interface when t...

Page 281: ...set up route polices if the network administrator is trying to specify the gateway for the traffic that destined for a certain website To use a destination domain name as criteria just select Domain...

Page 282: ...ts s If you manually enter the domain name in a route policy after clicking OK to apply the route policy those domain names will be given a number That means the router has automatically created stri...

Page 283: ...1 100 200 152 255 255 255 248 for us and the gateway IP is 211 100 200 158 The public IP addresses we can use are between 211 100 200 153 to 211 100 200 157 The following shows how to set up a non NAT...

Page 284: ...a Enable IP Routed Subnet b Enter the IP Address for the router Note that this could be the same as router s WAN IP c Enter the Subnet Mask according to ISP 3 For the host behind Vigor Router to obtai...

Page 285: ...sk 255 255 255 248 Gateway IP 211 100 200 153 will be able to access Internet through Vigor Router R Ro ou ut ti in ng g U Us sa ag ge e L LA AN N We may also create a LAN subnet for routing usage Her...

Page 286: ...outing Usage c Enter the IP Address for the router Note that this could be the same as router s WAN IP d Enter the Subnet Mask according to ISP 4 For DHCP Server Configuration we may either Disable DH...

Page 287: ...ng g If PC with public IP address setting cannot access Internet after above configuration please check If the public IP address has been used by another device If the router s WAN Access Mode is Stat...

Page 288: ...oad Balance Route Policy The following image is a screen shot of Load Balance Route policy page It lists all the policies and shows whether the policy is enabled what are the criteria to match and thr...

Page 289: ...s WAN or VPN there are some more options Failover to Enables packet to be sent through other Interface or follow another Policy when detects a path failure in the original interface The above configur...

Page 290: ...dministrator may set priority between 1 and 249 for this Route policy where smaller number indicates higher priority When two policies are having the same priority the first according to the policy in...

Page 291: ...ilize this SIM card to provide more useful functions for user Now we have developed some useful functions for user such as sending SMS from a router to report router status rebooting router remotely v...

Page 292: ...explained as follows Item Description Enable SMS Quota Limit Check the box to enable such feature Quota Limit Specify the maximum number of sending SMS for LTE When quota exceeded There are two action...

Page 293: ...ycle duration by specifying the days and the hours Cycle duration Specify the days to reset the number of SMS sent For example 7 means the whole cycle is 7 days 20 means the whole cycle is 20 days Whe...

Page 294: ...ease note that the SIM card can not receive new SMS when all SMS indexes are occupied Click the Simple Mode link or the Advanced Mode link below to switch between these two modes I II I 7 7 2 2 1 1 S...

Page 295: ...Description Mark as Read Those SMS in unread state are shown in bold text If you want to change SMS into read state select them and click the OK button Checking the checkbox in title will select all u...

Page 296: ...Guide 280 Message Content Display the full content of the message OK Return to previous page Delete Click it to delete all SMS of this message and return to previous page Next Click it to see the con...

Page 297: ...can be an international phone number 8869123455678 or a general phone number 0912345678 Data Coding Scheme The router will automatically select a suitable Data Coding Scheme according to the current...

Page 298: ...ion to reboot Vigor router remotely and get the router status via SMS Go to LTE Router Commands to get the following page Available settings are explained as follows Item Description Reboot on SMS Mes...

Page 299: ...entering the password PIN specified in this field The password shall be composed by letters numbers and baseline Access Control List Check the box to type or modify up to 3 phone numbers The phone num...

Page 300: ...s LTE WAN status IMEI International Mobile Equipment Identity of the embedded LTE module IMSI International Mobile Subscripber Identity of the LTE SIM card Access Tech Type of LTE connection CDMA GSM...

Page 301: ...annel RX Rate Maximum TX RX link rate of LTE connection SMS Centre Number The phone number for SMS service of the LTE SIM card SMS Service status Whether the SMS service of the LTE SIM card is ready S...

Page 302: ...Vigor2862 Series User s Guide 286 This page is left blank...

Page 303: ...er s Guide 287 P Pa ar rt t I II II I W Wi ir re el le es ss s L LA AN N Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well...

Page 304: ...ntegrated wireless local area network WLAN for 5 GHz 802 11ac or 2 4 5 GHz 802 11n WLAN applications It supports channel operations of 20 40 MHz at 2 4 GHz and 20 40 80 MHz at 5 GHz Vigor2862 ac serie...

Page 305: ...ay consider using WPA for the most secure connection You should select the appropriate security mechanism according to your needs No matter which security suite you select they all will enhance the ov...

Page 306: ...will open channels 52 56 60 64 100 104 108 112 116 120 124 128 132 136 and 140 At present we will not open DFS channels in the USA because we do not have plan for DFS certification in the USA Channels...

Page 307: ...se for a company and specified for a guest AP for any wireless clients accessing into Internet Follow the steps listed below 1 Open Wizards Wireless Wizard 2 The screen of wireless wizard will be show...

Page 308: ...tiated via 802 1x authentication Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde Use the same SSID and Security Key as above Check the box t...

Page 309: ...rame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Either 8 63 ASCII characters su...

Page 310: ...field below or automatically negotiated via 802 1x authentication Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde Next Click it to get into...

Page 311: ...Check the box to enable wireless function Mode For 2 4GHz At present the router can connect to 11b Only 11g Only 11n Only 2 4 GHz Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneo...

Page 312: ...different usage In default the first set of SSID will be enabled You can hide it for your necessity SSID Means the identification of the wireless LAN SSID can be any text numbers or various special ch...

Page 313: ...oke it The password PSK of default security mode is provided and stated on the label pasted on the bottom of the router For the wireless client who wants to access into Internet through such router pl...

Page 314: ...namically from RADIUS server with 802 1X protocol WPA PSK Accepts only WPA clients and the encryption key should be entered in PSK WPA2 PSK Accepts only WPA2 clients and the encryption key should be e...

Page 315: ...be selected at a time The keys can be entered in ASCII or Hexadecimal Check the key you wish to use After finishing all the settings here please click OK to save the configuration I II II I 1 1 4 4 A...

Page 316: ...ired to insert this MAC address into their access control list Attribute s Isolate the station from LAN select to isolate the wireless connection of the wireless client of the MAC address from LAN Com...

Page 317: ...on with WPS supported It is the simplest way to build connection between wireless network clients and vigor router Users do not need to select any encryption mode and type any long encryption passphra...

Page 318: ...rt PBC button of network card If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the vigor r...

Page 319: ...de of the router Only WPA2 PSK and WPA PSK support WPS Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure The router will wait for WPS requests from wireless cli...

Page 320: ...ridge interface The application for the WDS Repeater mode is depicted as below The major difference between these two modes is that while in Repeater mode the packets received from one peer AP can be...

Page 321: ...ollowing page will be shown Available settings are explained as follows Item Description Mode Choose the mode for WDS setting Disable mode will not invoke any WDS setting Bridge mode is designed to fu...

Page 322: ...ses are allowed to be entered in this page at one time Yet please disable the unused link to get better performance If you want to invoke the peer MAC address remember to check Enable box in the front...

Page 323: ...dwidth 20 the router will use 20Mhz for data transmission and receiving between the AP and the stations 20 40 Vigor Router will scan for nearby wireless AP and then use 20MHz if the number of AP is mo...

Page 324: ...t over the power save mechanisms supported by Wi Fi networks It allows devices to take more time in sleeping state and consume less power to improve the performance by minimizing transmission latency...

Page 325: ...d will not occupy the wireless network for a long time Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor ro...

Page 326: ...is determined according to the limitation of the wireless client Total Upload Limit It is available when Auto Adjustment is selected Type a value to define the maximum data traffic uploading for all...

Page 327: ...ce of the APs on the wireless LAN Yet only the AP which is in the same channel of this router can be found Please click Scan to discover all the connected APs Available settings are explained as follo...

Page 328: ...IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case...

Page 329: ...ns 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Available settings are explained as follows Item Description Enable Airtime Fairness Try to assign sim...

Page 330: ...hat frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization If dual band is detected the AP will let the wireless client conn...

Page 331: ...ent is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of 5GHz network connection the system shall wait and check for several seconds...

Page 332: ...box of Enable Band Steering and use the default value 15 for check time setting 3 Click OK to save the settings 4 Open Wireless LAN 2 4GHz General Setup and Wireless LAN 5GHz General Setup Configure...

Page 333: ...d Wireless LAN 5GHz Security Configure Security as 12345678 for both pages Click OK to save the settings 6 Now Vigor router will let the wireless clients connect to less congested wireless LAN such as...

Page 334: ...requirement and cut off the network connection for that wireless station to assist it to connect another Wireless AP to get better signal This option is to disable the roaming mechanism Strictly Mini...

Page 335: ...eneral advanced neighbor will display different status information including IP address MAC address Associated with AID RSSI Rate BW PSM WMM PhMd MCS Venfor Approx Distance SSID Visit Time and so on A...

Page 336: ...Vigor2862 Series User s Guide 320 This page is left blank...

Page 337: ...Vigor2862 Series User s Guide 321 P Pa ar rt t I IV V V Vo oI IP P Voice over IP network VoIP enables you to use your broadband Internet connection to make toll quality voice calls over the Internet...

Page 338: ...d the password field and the sign following them This is very similar to a URL so some may call it SIP URL SIP supports peer to peer direct calling and also calling via a SIP proxy server a role simil...

Page 339: ...models also equip with automatic QoS assurance QoS Assurance assists to assign high priority to voice traffic via Internet You will always have the required inbound and outbound bandwidth that is prio...

Page 340: ...del only 1 Open Wizards VoIP Wizard 2 The screen of VoIP Wizard will be shown as follows Available settings are explained as follows Item Description Set VoIP service provider domain VoIP service prov...

Page 341: ...ed to configure Phone 2 settings simply check this box Next Click it to get into the next setting page Cancel Click it to give up the VoIP wizard 3 After finished the settings above click Next for vie...

Page 342: ...the following page appears for you to configure secure phone IP call and set NAT Traversal Setting RTP for the VoIP function Available settings are explained as follows Item Description Secure Phone...

Page 343: ...dial outgoing IP Calls and Vigor router could receive the incoming IP Calls A Ap pp pl li ic ca at ti io on n f fo or r S Se ec cu ur re e P Ph ho on ne e Enable SAS Voice Prompt for ex if vigor route...

Page 344: ...incoming or outgoing calls do not match any entry on the phonebook the router will try to make the call being protected But if the call ends up unprotected e g peer side does not support ZRTP SRTP th...

Page 345: ...destination using AccountName Domain Realm as identity Info Selection items for Ring Port will differ according to the router you have Available settings are explained as follows Item Description Inde...

Page 346: ...ou can type similar name with the domain For example if the domain name is draytel org then you might set draytel 1 in this field Register via If you want to make VoIP call without register personal i...

Page 347: ...ntication ID Check the box to invoke this function and enter the name or number used for SIP Authorization with SIP Registrar If this setting value is the same as Account Name it is not necessary for...

Page 348: ...etting is 30 sec Ring Port Set Phone 1 and or Phone 2 as the default ring port s for this SIP account Ring Pattern Choose a ring tone type for the VoIP phone call Prefer Codec Select one of five codec...

Page 349: ...n detect if the voice on both sides is active or not If not the router will do something to save the bandwidth for other using Click On to invoke this function click off to close the function After fi...

Page 350: ...1 4 4 1 1 P Ph ho on ne e B Bo oo ok k In this section you can set your VoIP contacts in the phonebook It can help you to make calls quickly and easily by using speed dial Phone Number There are total...

Page 351: ...on Backup Phone Number When the VoIP phone obstructs or the Internet breaks down for some reasons the backup phone will be dialed out to replace the VoIP phone number At this time the phone call will...

Page 352: ...ne No action Add When you choose this mode the OP number will be added before the match prefix number for calling out through the specific route Strip When you choose this mode the partial or whole ma...

Page 353: ...number is between 7 and 9 that number can apply the prefix number settings here Max Len Set the maximum length of the dial number for applying the prefix number settings Route Choose the one that you...

Page 354: ...k the incoming calls without caller ID on the interface Phone port specified in the following window Such control also can be done based on preconfigured schedules For Block Unknown Domain this functi...

Page 355: ...OUT both incoming and outgoing calls Barring Type Determine the type of the VoIP phone call URI URL or number Specific URI URL or Specific Number This field will be changed based on the type you sele...

Page 356: ...ncoming phone call however you want to call back again for some reason Please dial number typed in this field to call back to that one Last Call Return Out Dial the number typed in this field to call...

Page 357: ...calls from unknown domain Block Unknown Domain Deact Dial the number typed in this field to release this function Block IP Calls Act Dial the number typed in this filed to block all the incoming call...

Page 358: ...PSTN phones Call Feature A brief description for call feature will be shown in this field for your reference Tone Display the tone settings that configured in the advanced settings page of Phone Index...

Page 359: ...out disturbing by VoIP phone call During the period the one who dial in will listen busy tone yet the local user will not listen any ring tone Index 1 15 in Schedule Enter the index of schedule profil...

Page 360: ...r users To set the sound pattern of the phone set simply choose a proper region to let the system find out the preset tone settings and caller ID type automatically Or you can adjust tone settings man...

Page 361: ...oudness of the call waiting tone The smaller the number is the louder the tone is It is recommended for you to use the default setting Interdigit Timeout Type a value in this field to specify time lim...

Page 362: ...o give another number to replace the plus sign for example can be replaced by 00 Then the above phone number will become 008865972727 When the callee receives such number he can use re dial function t...

Page 363: ...eerID The present in call or out call peer ID the format may be IP or Domain Elapse hh mm ss The format is represented as hours minutes seconds Tx Pkts Total number of transmitted voice packets during...

Page 364: ...48 I IV V 1 1 7 7 D Di ia ag gn no os st ti ic cs s VoIP Diagnostics is used for diagnosing if VoIP phone failure is caused by different tone or caller ID I IV V 1 1 7 7 1 1 C Ca al ll le er r I ID D...

Page 365: ...manner that emulates the properties of a point to point private link It is a form of VPN that can be used with a standard Web browser A digital certificate works as an electronic ID which is issued b...

Page 366: ...en home office and customer Secure connection between Teleworker staff on business trip and main office Exchange data between remote office and main office POS between chain store and headquarters S S...

Page 367: ...guide to set the LAN to LAN profile for VPN dial out connection from server to client step by step 1 Open Wizards VPN Client Wizard The following page will appear Available settings are explained as...

Page 368: ...he VPN client profile There are six types provided here Different type will lead to different configuration page After making the choices for the client profile please click Next You will see differen...

Page 369: ...Vigor2862 Series User s Guide 353 When you choose IPsec you will see the following graphic When you choose SSL you will see the following graphic...

Page 370: ...ose L2TP over IPsec Nice to Have or L2TP over IPsec Must you will see the following graphic Available settings are explained as follows Item Description Profile Name Type a name for such profile The l...

Page 371: ...PN if WAN2 down If WAN2 failed the router will use WAN1 for VPN connection WAN2 Only Only establish VPN if WAN1 down If WAN1 failed the router will use WAN2 for VPN connection Always On Check to enabl...

Page 372: ...ect PPTP or L2TP with or without IPsec policy above The length of the user name is limited to 11 characters Password This field is used to authenticate for connection when you select PPTP or L2TP with...

Page 373: ...Remote Access Connection Management for viewing VPN Connection status Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server through VPN Server Wizard View mo...

Page 374: ...ite VPN Remote Dial in User You can manage remote access by maintaining a table of remote user profile so that users can be authenticated to dial in via VPN connection Please choose a LAN to LAN Profi...

Page 375: ...n User selected 2 After making the choices for the server profile please click Next You will see different configurations based on the selection you made Here we take the examples of choosing Remote D...

Page 376: ...length of the file is limited to 10 characters User Name This field is used to authenticate for connection when you select PPTP or L2TP with or without IPsec policy above The length of the name is li...

Page 377: ...characters Local Network IP Enter the local network IP for TCP IP configuration Local Network Mask Enter the local network mask for TCP IP configuration 3 After finishing the configuration please cli...

Page 378: ...ervice as you need If you intend to run a VPN server inside your LAN you should disable the VPN service of Vigor Router to allow VPN tunnel pass through as well as the appropriate NAT settings such as...

Page 379: ...k to use the PAP protocol for authentication Dial In PPP Encryption MPPE Optional MPPE This option represents that the MPPE encryption method will be optionally employed in the router for the remote d...

Page 380: ...l In Users when DHCP Disable set Enter a start IP address for the dial in PPP connection for LAN1 LAN2 LAN8 will be available if it is enabled Refer to LAN General Setup for enabling the LAN interface...

Page 381: ...el establishment There are two encapsulation methods used in IPsec Transport and Tunnel The Transport mode will add the AH ESP payload and use original IP header to encapsulate the data payload only I...

Page 382: ...ion Confirm Pre Shared Key Retype the characters to confirm the pre shared key Note Any packets from the remote dial in user which does not match the rule defined in VPN and Remote Access Remote Dial...

Page 383: ...ss into the setting page of IPsec Peer Identity Enable Check the box to enable such profile Name Display the profile name of that index Click each index to edit one peer digital certificate There are...

Page 384: ...ck to check one specific field of digital signature to accept the peer with matching value The field can be IP Address Domain or E mail Address The box under the Type will appear according to the type...

Page 385: ...rovide you with a scalable client server mode permitting multi client to connect to a single OpenVPN Server process over a single TCP or UDP port V V 1 1 7 7 1 1 G Ge en ne er ra al l S Se et tu up p...

Page 386: ...via OpenVPN tunnel between the server and the client can be connected successfully Available settings are explained as follows Item Description Remote Server Click IP and use the drop down list to spe...

Page 387: ...Series User s Guide 371 provider Export The settings in this page can be saved as a file after clicking such button Later the downloaded file can be imported to the VPN client for building OpenVPN co...

Page 388: ...lf or over IPsec and corresponding security methods etc The router provides 32 access accounts for dial in users Besides you can extend the user accounts to the RADIUS server through the built in RADI...

Page 389: ...uide you to fill all the necessary fields Available settings are explained as follows Item Description User account and Authentication Enable this account Check the box to enable this function Idle Ti...

Page 390: ...both sides of VPN Tunnel while connecting Block When there is conflict occurred between the hosts on both sides of VPN Tunnel in connecting such function can block data transmission of Netbios Naming...

Page 391: ...nels and L2TP with IPsec Policy when you specify the remote node Check the Medium DES 3DES or AES box as the security method Medium Authentication Header AH means data will be authenticated but not be...

Page 392: ...orresponding security methods etc The following figure shows the summary table according to the item All Trunk selected for View Available settings are explained as follows Item Description View All C...

Page 393: ...ned into VPN Load Balance and VPN Backup mechanism If there is no profile joined yet this page will be shown as follows To edit each profile 1 Click each index to edit each profile and you will get th...

Page 394: ...First or LTE First WAN4 First While connecting the router will use WAN1 WAN2 WAN3 or LTE WAN4 as the first channel for VPN connection If WAN1 WAN2 WAN3 or LTE WAN4 fails the router will use another W...

Page 395: ...case of abnormal VPN IPsec tunnel disruption For details please refer to the note below Check to enable the transmission of PING packets to a specified IP address Enable PING to keep alive is used to...

Page 396: ...IPsec Policy Pre Shared Key Input 1 63 characters as pre shared key Digital Signature X 509 Select one predefined Profiles set in the VPN and Remote Access IPsec Peer Identity Peer ID Select one of th...

Page 397: ...IKE phase 2 proposal To propose the local available algorithms to the VPN peers and get its feedback to find a match Three combinations are available for both modes We suggest you select the combinat...

Page 398: ...hrough the Internet You can select to use L2TP alone or with IPsec Select from below None Do not apply the IPsec policy Accordingly the VPN connection employed the L2TP without IPsec policy can be vie...

Page 399: ...nature to invoke this function and select one predefined Profiles set in the VPN and Remote Access IPsec Peer Identity Local ID Specify which one will be inspected first Alternative Subject Name First...

Page 400: ...Vigor router will get a remote Gateway PPP IP address from the remote router during the IPCP negotiation phase If the PPP IP address is fixed by remote side specify the fixed IP address here Do not c...

Page 401: ...e options under TCP IP Network Settings will be changed as shown below Remote Network IP Remote Network Mask Add a static route to direct all traffic destined to this Remote Network IP Address Remote...

Page 402: ...Vigor2862 Series User s Guide 386 specify the local IP address and the mapping virtual IP address 2 After finishing all the settings here please click OK to save the configuration...

Page 403: ...e activated when initial connection of single VPN tunnel is off line Before setting VPN TRUNK VPN Backup mechanism backup profile please configure at least two sets of LAN to LAN profiles with fully c...

Page 404: ...bled Name Display the name of VPN TRUNK VPN Backup mechanism profile Member1 Display the dial out profile selected from the Member1 drop down list below Active Yes means normal condition No means the...

Page 405: ...ofile is disabled Name Display the name of VPN TRUNK VPN Load Balance mechanism profile Member1 Display the dial out profile selected from the Member1 drop down list below Active Yes means normal cond...

Page 406: ...ofiles in LAN to LAN will be displayed in blue Update Click this button to save the changes to the Status Enable or Disable profile name member1 or member2 Delete Click this button to delete the selec...

Page 407: ...button type a name for such profile e g 071023 choose one of the LAN to LAN profiles from Member1 drop down list choose one of the LAN to LAN profiles from Member2 drop down list and click Add at last...

Page 408: ...er 192 168 50 200 in the field of Peer GRE IP A Ad dv va an nc ce ed d L Lo oa ad d B Ba al la an nc ce e a an nd d B Ba ac ck ku up p After setting profiles for load balance you can choose any one of...

Page 409: ...rate It can be divided into Auto Weighted and According to Speed Ratio Auto Weighted can detect the device speed 10Mbps 100Mbps and switch with fixed value ratio 3 7 for packet transmission If the tr...

Page 410: ...uch binding tunnel table can be established UDP means when the source IP destination IP destination port and fragment conditions match with the settings specified here and UDP Service Port also fits t...

Page 411: ...ng Des IP range Start and End Choose TCP UDP IGMP ICMP or Other as Binding Protocol A Ad dv va an nc ce ed d B Ba ac ck ku up p Available settings are explained as follows Item Description Profile Nam...

Page 412: ...eing activated alternatively Resume when VPN connection breaks down or disconnects Member 1 will be the top priority for the system to do VPN connection Detail Information This field will display deta...

Page 413: ...General Mode This filed displays the profile configured in LAN to LAN with Index number and VPN Server IP address The VPN connection built by General Mode does not support VPN backup function Backup...

Page 414: ...how to set up Main mode IPsec Tunnel between two Vigor Routers IPsec VPN with Main mode use the IP address of VPN client as identifier and the IP address must be set on VPN server therefore if the VPN...

Page 415: ...e has IPsec Tunnel enabled e Enable Specify Remote VPN Gateway and enter Peer VPN Server IP as the public IP of VPN client router f Click on IKE Pre Shared Key and enter the Pre shared Key g Select th...

Page 416: ...e e S Se et tu up p 1 Create a Dial out profile to VPN server Go to VPN and Remote Access LAN to LAN click on an available index to add a new profile 2 Setup the dial out profile In Common Settings a...

Page 417: ...same Pre Shared key as VPN Server g Click on Advanced in IPsec Security Method In IKE advanced settings h Select Main Mode for IKE phase 1 mode i Make sure phase 1 and phase 2 proposal are using the s...

Page 418: ...li is sh hm me en nt t To initiate the VPN connection go to VPN and Remote Access Connection Management on VPN Client Select the profile to VPN Sever and click Dial If all the settings are matched th...

Page 419: ...tion establishing speed Support newer and more complicated secure ciphers to make the connection more secure Using new connection progress and discard the PPP IKEv2 provides the faster establishing sp...

Page 420: ...the IP address of LAN_C as Remote Network IP and Remote Network Mask e Click OK V VP PN N C Cl li ie en nt t S Se et tt ti in ng gs s 1 Go to VPN and Remote Access LAN to LAN and click an available i...

Page 421: ...nput the IP address of LAN_S as Remote Network IP and Remote Network Mask Click OK to save the profile V VP PN N T Tu un nn ne el l E Es st ta ab bl li is sh hm me en nt t To initiate the VPN connecti...

Page 422: ...tion protocol on the Internet most networks have few restrictions on SSL traffic and as a result SSL VPN is more likely to work when other VPN technologies experience difficulties due to obstacles suc...

Page 423: ...is is separate from the management port which is configured in System Maintenance Management The default setting is 443 Server Certificate When the client does not set any certificate default certific...

Page 424: ...as your online bank The SSL VPN can be operated in either full tunnel mode or proxy mode Now Vigor2862 series allows up to 16 simultaneous incoming users SSL VPN authentication and permissions manage...

Page 425: ...Psec policy above The length of the name password is limited to 23 characters Password This field is applicable when you select PPTP or L2TP with or without IPsec policy above The length of the name p...

Page 426: ...mote Node Select this option to specify the remote IP address ISDN number or peer ID used in IKE aggressive mode used to authenticate the remote dial in user If this option is not selected the authent...

Page 427: ...licy Select any combination of Medium DES 3DES and AES security methods as desired Medium Authentication Header AH Data will be authenticated but not be encrypted By default this option is enabled You...

Page 428: ...AP server These profiles will be used by applications such as User Management VPN and etc Each item is explained as follows Item Description Set to Factory Default Click to clear all profiles Index Cl...

Page 429: ...es that are configured and enabled will be listed in the Available User Account in the left box To add a user profile to a group select it from the left box and click the button and it will be moved t...

Page 430: ...iew logging status of SSL VPN Available settings are explained as follows Item Description Active User Display the name of the user who is connected to the SSL VPN server Host IP Display the IP addres...

Page 431: ...or router support digital certificates conforming to standard X 509 Any entity wants to utilize digital certificates should first request a certificate issued by a CA server It should also retrieve ce...

Page 432: ...import a saved file as the certification information Refresh Click this button to refresh the information listed below View Click this button to view the detailed settings for certificate request Dele...

Page 433: ...T Vigor router allows you to generate a certificate request and submit it the CA server then import it as Local Certificate If you have already gotten a certificate from a third party you may import i...

Page 434: ...s OK Upload PKCS12 Certificate It allows users to import the certificate whose extensions are usually pfx or p12 And these certificates usually need passwords Note that PKCS12 is a standard for storin...

Page 435: ...tings for certificate request Info You have to copy the certificate request information from above window Next access your CA server and enter the page of certificate request copy the information into...

Page 436: ...from a trusted root certificate authority is complicated and time consuming Therefore Vigor router offers a mechanism which allows you to generate root CA to save time and provide convenience for gen...

Page 437: ...the following window Use Browse to find out the saved text file Then click Import The one you imported will be listed on the Trusted CA Certificate window For viewing each trusted CA certificate click...

Page 438: ...ficate for this router can be saved within one file Please click Backup on the following screen to save them If you want to set encryption password for these certificates please type characters in bot...

Page 439: ...ity has been always the most concerned The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders It also restricts users in the local network from...

Page 440: ...es unsolicited incoming data Selectable Denial of Service DoS Distributed DoS DDoS attacks protection I IP P F Fi il lt te er rs s Depending on whether there is an existing Internet connection or in o...

Page 441: ...xhaust all your system s resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system The DoS Defense function enables...

Page 442: ...er Under some circumstance your filter set can be linked to work in a serial manner So here you assign the Start Filter Set only Also you can configure the Log Flag settings Apply IP filter to VPN inc...

Page 443: ...hecking for data transmission Such feature is enabled in default All the packets while transmitting through Vigor router will be filtered by firewall If the firewall system e g content filter server d...

Page 444: ...ttings are explained as follows Item Description Filter Select Pass or Block for the packets that do not match with the filter rules Sessions Control The number typed here is the total sessions of the...

Page 445: ...tent Filter for applying with this router Please set at least one profile for choosing in CSM URL Content Filter web page first Or choose Create New from the drop down list in this page to create a ne...

Page 446: ...do not have any idea of choosing suitable codepage please open Syslog From Codepage Information of Setup dialog you will see the recommended codepage listed on the dialog box Window size It determine...

Page 447: ...k Active to enable the rule Available settings are explained as follows Item Description Filter Rule Click a button numbered 1 7 to edit the filter rule Click the button will open Edit Filter Rule web...

Page 448: ...le To use Wizard Mode simple do the following steps 1 Click the Wizard Mode radio button 2 Click Index 1 The setting page will appear as follows Available settings are explained as follows Item Descri...

Page 449: ...ere is no profile for you to select please choose Create New from the drop down list in this page to create a new profile All the hosts in LAN must follow the standard configured in the APP Enforcemen...

Page 450: ...erver Please refer to section Syslog Mail Alert for more detailed information DNS Filter Select one of the DNS Filter profile settings created in CSM DNS Filter for applying with this router Please se...

Page 451: ...acter long Schedule Profile Set PCs on LAN to work at certain time interval only You may choose up to 4 schedules out of the 15 schedules pre defined in Applications Schedule setup The default setting...

Page 452: ...oose Any Address Single Address Range Address Subnet Address as the Address Type and type them in this dialog In addition if you want to use the IP range from defined groups or objects please choose G...

Page 453: ...ts except the range defined here are available for this service type the port number greater than this value is available the port number less than this value is available for this profile Service Gro...

Page 454: ...ected in User Management General Setup The general firewall rule will be applied to the user user group all users specified here Note When there is no user profile or group profile existed Create New...

Page 455: ...Filter profile settings created in CSM DNS Filter for applying with this router Please set at least one profile in CSM Web Content Filter web page first Or click the DNS Filter link from the drop down...

Page 456: ...e data flow which matched with the firewall rule DrayTek Banner Please uncheck this box and the following screen will not be shown for the unreachable web page The default setting is Enabled Strict Se...

Page 457: ...elect all the items listed below White Black List Option Set white black list of IPv4 IPv6 address Enable SYN flood defense Check the box to activate the SYN flood defense function Once detecting the...

Page 458: ...the port scanning Threshold rate the Vigor router will send out a warning By default the Vigor router sets the threshold as 2000 packets per second That means when 2000 packets per second received the...

Page 459: ...olves the perpetrator sending overlapping packets to the target hosts so that those target hosts will hang once they re construct the packets The Vigor routers will block any packets realizing this at...

Page 460: ...User s Guide 444 After finishing all the settings here please click OK to save the configuration V VI I 1 1 3 3 2 2 S Sp po oo of fi in ng g D De ef fe en ns se e Click the Spoofing Defense tab to ope...

Page 461: ...escription Mode To have a firewall rule test specify the service type ICMP UDP TCP of the packet and type of the IP address IPv4 IPv6 Direction Set the way from WAN or from LAN that Vigor router recei...

Page 462: ...rection from Computer A to B or from the B to A for the second packet Protocol It displays the mode selected above and the sate If required click the mode link to configure advanced setting The common...

Page 463: ...s User s Guide 447 The following figure shows the test result after clicking Analyze Processing state for the fuctions MAC Filter QoS User management etc related to the firewall will be displayed by g...

Page 464: ...168 1 20 accessing to Internet through Vigor router Others e g 192 168 1 31 and 192 168 1 32 outside the range can get the source from LAN only The way we can use is to set two rules under Firewall Fo...

Page 465: ...Filter Rule 7 If Block If No Further Match for is selected for Filter the firewall of the router would check the packets with the rules starting from Rule 3 to Rule 7 The packets not matching with the...

Page 466: ...Type 192 168 1 10 in the field of Start IP and type 192 168 1 20 in the field of End IP Then click OK to save the settings The computers within the range can access into the Internet 7 Now check the...

Page 467: ...Series User s Guide 451 8 Both filter rules have been created Click OK Now all the settings are configured well Only the computers with the IP addresses within 192 168 1 10 192 168 1 20 can access to...

Page 468: ...ecks the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can prev...

Page 469: ...ing Stream Remote Control Web HD application This page allows you to set 32 profiles for different requirements The APP Enforcement Profile will be applied in Default Rule of Firewall General Setup fo...

Page 470: ...rofile The maximum length of the name you can set is 15 characters Select All Click it to choose all of the items in this page Clear All Uncheck all the selected boxes Enable Check the box to select t...

Page 471: ...m Description Upgrade Setting APPE Module Version Display current version status of APPE signature New version from the Internet Download button is available only when Vigor router detects new APPE ve...

Page 472: ...or the system completing the process Upgrade Automatically Scheduled Update Check the box to make Vigor router upgrading the APPE signature based on the schedule configured here After finishing all th...

Page 473: ...based on the fields of TCP IP headers only On the other hand Vigor router can prevent user from accidentally downloading malicious codes from web pages It s very common that malicious codes conceal i...

Page 474: ...When you choose this setting both configuration set in this page for URL Access Control and Web Feature will be inactive Both Block The router will block all the packages that match with the condition...

Page 475: ...ited before Action This setting is available only when Either URL Access Control First or Either Web Feature First is selected Pass Allow accessing into the corresponding webpage with the keywords lis...

Page 476: ...re it will be processed with reverse action File Extension Profile Choose one of the profiles that you configured in Object Setting File Extension Objects previously for passing or blocking the file d...

Page 477: ...u have to click Activate to satisfy your request Be aware that service provider matching with Vigor router currently offers a period of time for trial version for users to experiment If you want to pu...

Page 478: ...erver Setup Test Server It is recommended for you to use the default setting auto selected Find more Click it to open http myvigor draytek com for searching another qualified and suitable server Cache...

Page 479: ...You can type the message manually for your necessity or click Default Message button to get the default text displayed on the field of Administration Message Eight profiles are provided here as Web c...

Page 480: ...he web pages do not match with the specified feature set here they will be processed with the categories listed on the box below Block restrict accessing into the corresponding webpage with the charac...

Page 481: ...g 168 95 1 1 on router or external DNS server e g 8 8 8 8 If the router server is used DNS Filter General Setting will be applied to DNS query from clients on LAN However if the external DNS server i...

Page 482: ...Block Only the log about Block will be recorded in Syslog All All the actions Pass and Block will be recorded in Syslog Web Content Filter Set the filtering conditions URL Content Filter Set the filt...

Page 483: ...everal useful services such as Anti Spam Web Content Filter Anti Intrusion and etc to filtering the web pages for the sake of protecting your system To access into MyVigor for getting more information...

Page 484: ...s Guide 468 2 Click the Activate link A login page for MyVigor web site will pop up automatically 3 Click the link of Create an account now 4 The system will ask if you are 16 years old or over If yes...

Page 485: ...I am under 16 years old to get the following page Then click I and my legal guardian agree 5 After reading the terms of service privacy policy click Agree 6 In the following page enter your personal i...

Page 486: ...ated an account successfully 9 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 10 Click the Activate my Account link to enable the accoun...

Page 487: ...he following page please type in the account and password that you just created in the fields of UserName and Password 12 Now click Login Your account has been activated You can access into MyVigor se...

Page 488: ...service Web Content Filter and URL Content Filter Web Content Filter Benefits Easily and quickly implement the category website that you want to block Note License is required URL Content Filter Benef...

Page 489: ...outer the web page would be blocked and the following message would be displayed instead II Via URL Content Filter A Block the web page containing the word of Facebook 1 Open Object Settings Keyword O...

Page 490: ...Guide 474 3 Open CSM URL Content Filter Profile Click an index number to open the setting page 4 Configure the settings as the following figure 5 When you finished the above steps click OK Then open...

Page 491: ...the field of URL Content Filter Now users cannot open any web page with the word facebook inside B Disallow users to play games on Facebook 1 Open Object Settings Keyword Object Click an index number...

Page 492: ...page 4 Configure the settings as the following figure 5 When you finished the above steps please open Firewall General Setup 6 Click the Default Rule tab Choose the profile just configured from the d...

Page 493: ...ing Configuration Backup Syslog Mail Alert Time and Date Management Reboot System Firmware Upgrade and Activation It is used to control the bandwith of data transmission through configuration of Sessi...

Page 494: ...l items that you have to know the way of configuration System Status TR 069 Administrator Password User Password Login Page Greeting Configuration Backup Syslog Mail Alert Time and Date Management Reb...

Page 495: ...ted information from this presentation Available settings are explained as follows Item Description Model Name Display the model name of the router Firmware Version Display the firmware version of the...

Page 496: ...ay the connection type IP Address Display the IP address of the WAN interface Default Gateway Display the assigned IP address of the default gateway IPv6 Address Display the IPv6 address for LAN Scope...

Page 497: ...is very convenient for an administrator to manage a TR 069 device through an Auto Configuration Server e g VigorACS Available settings are explained as follows Item Description Tr069 Click Enable to a...

Page 498: ...close the mechanism of notification STUN Settings Disable The default is Disable Enable Please type the relational settings listed below Server Address Type the IP address of the STUN server Server Po...

Page 499: ...rease the bandwidth setting for that CPE or not Disable The default is Disable Enable Click it to enable such feature Time Period Choose the time interval 15 mins 30 mins 1hour 3 hours or 6 hours for...

Page 500: ...llows Item Description Administrator Password The administrator can login web user interface of Vigor router to modify all of the settings to fit the requirements Old Password Type in the old password...

Page 501: ...tor Local User Usually the system administrator has the highest privilege to modify the settings on the web user interface of the Vigor router However in some cases it might be necessary to have other...

Page 502: ...ly check the box to enable the following settings Administrator LDAP Setting Enable LDAP AD login for admin users If it is enabled any user can access into the web user interface of Vigor router throu...

Page 503: ...ease use the new password to access into the web user interface again Below shows an example for accessing into User Operation with User Password 1 Open System Maintenance User Password 2 Check the bo...

Page 504: ...ith User Mode will be shown as follows Settings to be configured in User Mode will be less than settings in Admin Mode Only basic configuration settings will be available in User Mode Info Setting in...

Page 505: ...requirement Available settings are explained as follows Item Description Enable Check this box to enable the login customization function Login Page Title Type a brief description e g Welcome to DrayT...

Page 506: ...Vigor2862 Series User s Guide 490 Below shows an example of login customization with the information typed in Login Description and Bulletin...

Page 507: ...w to backup your configuration 1 Go to System Maintenance Configuration Backup The following page will be popped up as shown below Available settings are explained as follows Item Description Restore...

Page 508: ...ored to a USB connecting to Vigor router as a backup Backup folder Set the path for downloading Periodicity backup Set the circle duration for backup Backup after change configuration Backup will be e...

Page 509: ...ing examples The Mac or Linux platform will appear different windows but the backup function is still available Info Backup for Certification must be done independently The Configuration Backup does n...

Page 510: ...494 2 Click Choose File button to choose the correct configuration file for uploading to the router 3 Click Restore button and wait for few seconds the following picture will tell you that the restor...

Page 511: ...agement If there is no name here simply lick the link to access into System Maintenance Management to set the router name Server IP Address The IP address of the Syslog server Destination Port Assign...

Page 512: ...on Password Type the password for authentication Enable E mail Alert Check the box to send alert message to the e mail box while the router detecting the item s you specify here Click OK to save these...

Page 513: ...outer s system time Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol Time Server Type the web site of the time server Priority Choose Auto...

Page 514: ...1 9 9 S SN NM MP P This page allows you to configure settings for SNMP and SNMPV3 services The SNMPv3 is more secure than SNMP through the encryption method support AES and DES and authentication met...

Page 515: ...ngth of the text is limited to 23 characters Notification Host IP IPv4 Set the IPv4 address of the host that will receive the trap community Notification Host IP IPv6 Set the IPv6 address of the host...

Page 516: ...ment Port Setup TLS SSL Encryption Setup CVM Access Control and Device Management The management pages for IPv4 and IPv6 protocols are different F Fo or r I IP Pv v4 4 Available settings are explained...

Page 517: ...bject profile Related IP with Subnet Mask will appear automatically Management Port Setup User Define Ports Check to specify user defined port numbers for the Telnet HTTP HTTPS FTP TR 069 and SSH serv...

Page 518: ...o enable the function of Central Management AP If unchecked menu items related to Central Management AP will be hidden Device Management Check the box to enable the device management function for Vigo...

Page 519: ...Type the index number of the IPv6 object profile Related IP address will appear automatically After finished the above settings click OK to save the configuration F Fo or r L LA AN N Available settin...

Page 520: ...vailable settings are explained as follows Item Description Refresh Click to refresh the page to display the latest information Enable LED Select to enable front panel LEDs Enable Sleep Mode Turn off...

Page 521: ...ory Reset and Wireless ON OFF WPS buttons on the front panel are enabled by default and can be enabled or disabled if required Disabling the Factory Reset button will prevent tampering by unauthorized...

Page 522: ...B The USB ports can be individually enabled or disabled When a USB port is disabled attached devices will not be recognized by the router Available settings are explained as follows Item Description...

Page 523: ...atus Shows the status of the USB port Link Up An active Ethernet device is connected to the port Link Down No active Ethernet device is detected The LAN port is disabled Speed Shows the negotiated spe...

Page 524: ...self signed certificate is signed with its own private key The self signed certificate will be applied in SSL VPN HTTPS and so on In addition it can be created for free by using a wide variety of too...

Page 525: ...Vigor2862 Series User s Guide 509...

Page 526: ...hedule web page and you can use the number that you have set in that web page If you want to reboot the router using the current configuration check Using current configuration and click Reboot Now To...

Page 527: ...eed to firmware upgrade Click the button of Check The Latest Firmware to open a pop up window displaying the newest firmware version released for such Vigor router Choose the one you need and click Do...

Page 528: ...period of time Backup manually Click this option and click OK firmware backup will be performed immediately Firmware Version Display recent firmware backup version Last backup Display the time of rec...

Page 529: ...Click System Maintenance Activation to open the following page for accessing http myvigor draytek com Available settings are explained as follows Item Description Activate via Interface Choose WAN in...

Page 530: ...Vigor2862 Series User s Guide 514...

Page 531: ...ternal RADIUS server for the user profile Uncheck the box to turn off ecurity authentication service offered by internal RADIUS server for the user profile If you check the box next to such item all o...

Page 532: ...C Co on nt tr ro ol l There are nine groups of setting information which can be displayed on Dashboard as a reference for administrator user Except for Front Panel and System Information the settings...

Page 533: ...d traffic can be throttled back to a lower speed If there s no defined priority to specify which packets should be discarded or in another term dropped from an overflowing queue packets of sensitive a...

Page 534: ...the backbone will do the same checking before executing treatments in order to ensure service level consistency throughout the whole QoS enabled network However each node may take different attitude...

Page 535: ...nagement menu click Sessions Limit to open the web page To activate the function of limit session simply click Enable and set the default session limit Available settings are explained as follows Item...

Page 536: ...t for each index Add Adds the specific session limitation onto the list above Edit Allows you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limit...

Page 537: ...e Click this button to activate the function of limit bandwidth Disable Click this button to close the function of limit bandwidth Default TX limit Define the default speed of the upstream for each co...

Page 538: ...his field the system will use the default speed for the specific limitation you set for each index Add Add the specific speed limitation onto the list above Edit Allow you to edit the settings for the...

Page 539: ...LTE interface Direction Define which traffic the QoS Control settings will apply to IN apply to incoming traffic only OUT apply to outgoing traffic only BOTH apply to both incoming and outgoing traffi...

Page 540: ...oIP SIP RTP When this feature is enabled the VoIP SIP UDP packets will be sent with highest priority SIP UDP Port Set a port number used for SIP This page allows to configure general QoS settings of t...

Page 541: ...P application Outbound TCP ACK Prioritize The difference in bandwidth between download and upload are great in ADSL2 environment For the download speed might be impacted by the uploading TCP ACK you c...

Page 542: ...e following page Now you can define the name for that Class In this case Test is used as the name of Class Index 1 3 For adding a new rule click Add to open the following page Available settings are e...

Page 543: ...in Start IP address and Subnet Mask DiffServ CodePoint All the packets of data will be divided with different levels and will be processed according to the level type by the system Please assign one...

Page 544: ...dit link under Service Type field 2 After you click the Edit link you will see the following page 3 For adding a new service type click Add to open the following page Available settings are explained...

Page 545: ...ed service type please select the radio button of that one and click Edit Edit for modification R Re et ta ag g t th he e P Pa ac ck ke et ts s f fo or r I Id de en nt ti if fi ic ca at ti io on n Pac...

Page 546: ...on of QoS adjustment on Inbound Outbond bandwidth and bandwidth ratio Vigor router can perform the bandwidth management for the protocols streaming remote control web HD and so on Click Bandwidth Mana...

Page 547: ...tocols Clear All Click it to de select all of the protocols Apply to all Choose one of the actions from the drop down list It is prepared for applying to all protocols Apply Click it to make the selec...

Page 548: ...t technology QoS Quality of Service helps you to well allocate the bandwidth upon your demand of Voice Video or Data transferring Let s see how to get the optimum bandwidth per your request by using D...

Page 549: ...P for such class and click Add 4 Check the box of ACT Click Edit to specify the local address 5 In the pop up window choose Range Address as the Address Type and type the start IP address and end IP a...

Page 550: ...Guide 534 6 Click OK again to save the settings 7 The class rule for VoIP has been set Click OK to return to previous page 8 Do the same steps to add class rules for IPTV and Data Email with IP addre...

Page 551: ...535 9 Assuming you get 2MB 512Kb Internet line You can check Enable of WAN1 to set up the bandwidth for different groups among VoIP IPTV and Data Email 10 Enter 30 50 and 15 in the boxes for VoIP IPT...

Page 552: ...Vigor2862 Series User s Guide 536 11 Click the WAN1 link and check the box of Enable UDP Bandwidth Control 12 Click OK to save the settings The class rules for WAN1 are defined as shown below...

Page 553: ...ser account Network administrator can give different firewall policies or rules for different hosts with different User Management accounts This is more flexible and convenient for network management...

Page 554: ...ence the contents of the filter rule s applied to every user Available settings are explained as follows Item Description Mode There are two modes offered here for you to choose Each mode will bring d...

Page 555: ...pixel to have an image of enterprise or have the effect of advertisement Login Page Greeting Such link allows you to access into the setting page for login greeting For detailed information refer to S...

Page 556: ...files up to 200 which will be applied for users controlled under User Management Simply open User Management User Profile To set the user profile please click any index number link to open the followi...

Page 557: ...r passes the authentication he she can access Internet via this router However the accessing operation will be restricted with the conditions configured in this user profile The maximum length of the...

Page 558: ...rules pre configured in Firewall can be adopted for such user profile Create New Policy If you choose such item the following page will be popped up for you to define another filter rule as a new pol...

Page 559: ...can access Internet through any browser on Windows Note that Alert Tool can be downloaded from DrayTek web site Telnet If it is selected the user can use Telnet command to perform the authentication j...

Page 560: ...quota automatically according to the factory quota settings Default Time Quota Type the value for the time manually Default Data Quota Type the value for the data manually Quota reset when login perm...

Page 561: ...umber link to open the following page Available settings are explained as follows Item Description Name Type a name for this user group Available User Objects You can gather user profiles objects from...

Page 562: ...n Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically Refresh Click this link to refresh this page manually Index D...

Page 563: ...ay the quota for data transmission Idle Time Display the idle timeout setting for such profile Action Block can avoid specified user accessing into Internet Unblock allow the user to access into Inter...

Page 564: ...th User Management authentication function before a valid username and password have been correctly supplied a particular client will not be allowed to access Internet through the router There are thr...

Page 565: ...n some web browsers will display warning messages With Microsoft Internet Explorer you may get the following warning message Please press Continue to this website not recommended With Mozilla Firefox...

Page 566: ...appear Input the user name and the password for your account defined in User Management and click Login If the authentication is successful the client will be redirected to the original web site that...

Page 567: ...on you access an external web site to trigger the authentication You may also directly access the router s Web UI for authentication Both HTTP and HTTPS are supported for example http 192 168 1 1 or h...

Page 568: ...k com You may change it if you want For example you will get the following welcome message if you enter Login Successful in the Welcome Message table Also you will get a Tracking Window if you don t b...

Page 569: ...eate a user profile in User Management with chaochen test as username password while a VPN Remote Dial in user profile with the same username chaochen but a different password 1234 you will always get...

Page 570: ...count name for the authentication 2 Type the password for authentication and press Enter The message User login successful will be displayed with the expired time if configured Info Here expired time...

Page 571: ...which means this account has no time quota If the Time Quota is enabled and time is not 0 minute You will get the following message The expired time is shown after you login After you run out the ava...

Page 572: ...again Authentication via VigorPro Alert Notice Tool allows user to setup the re authentication interval so that the utility will send authentication requests periodically This will keep the client hos...

Page 573: ...le e 1 1 U Us se er rs s c ca an n s se ee e t th he e m me es ss sa ag ge e f fo or r l la an nd di in ng g p pa ag ge e a af ft te er r l lo og gg gi in ng g i in nt to o I In nt te er rn ne et t s...

Page 574: ...ck OK to save the settings 5 Open any browser e g FireFox Internet Explorer The logging page will appear and asks for username and password Please type the correct username and password 6 Click Login...

Page 575: ...in ng g i in nt to o I In nt te er rn ne et t s su uc cc ce es ss sf fu ul ll ly y 1 In the field of Landing Page please type the words as below body stats 1 script language javascript window locatio...

Page 576: ...rowser e g FireFox Internet Explorer The logging page will appear and asks for username and password Please type the correct username and password 5 Click Login If the logging is successful you will b...

Page 577: ...ts and promotional materials and broadcast of public service announcements W We eb b U Us se er r I In nt te er rf fa ac ce e V VI II I 4 4 1 1 P Pr ro of fi il le e S Se et tu up p Select Profile Set...

Page 578: ...n This mode does not perform any authentication The user will be redirected to the landing page The user can then leave the landing page to visit other websites C Cl li ic ck k t th hr ro ou ug gh h T...

Page 579: ...r to receive a PIN by SMS After they have authenticated themselves by entering the PIN they will be redirected to the landing page indicating that they have been granted Internet access S So oc ci ia...

Page 580: ...r ro of fi il le e 1 1 L Lo og gi in n M Me et th ho od d Click the index link e g 1 of the selected profile to display the following page Available settings are explained as follows Item Description...

Page 581: ...he configuration on this page and proceed to the next page If you have chosen Skip Login as the Login Mode skip to step 4 Whitelisting below Otherwise proceed to configure the login page by following...

Page 582: ...Vigor2862 Series User s Guide 566 Available settings are explained as follows Item Description Choose Login Select either Color Background or Image Background as the login...

Page 583: ...he RGB value Click Preview to preview the selected color Opacity 10 100 Available when Image Background is selected Set the opacity of the background image Background Image Available when Image Backgr...

Page 584: ...r the text to be displayed in the Terms and Conditions pop up window Accept Button Description Enter the text to be displayed on the accept button Accept Button Color Select the color of the accept bu...

Page 585: ...see only settings that are relevant to the selected login mode s Settings that are common to Facebook Google and PIN authentication are Item Description Welcome Message Enter the text to be displayed...

Page 586: ...above Refer to section A 1 How to create a Facebook App ID for Web Portal Authentication for details If you have selected Google login these settings will appear Item Description Google Login Descript...

Page 587: ...rovider used to send PIN notifications SMS providers are configured in Objects Setting SMS Mail Service Object Enter PIN Description Enter message to be displayed in the PIN textbox to prompt the user...

Page 588: ...to the next page Cancel Click to abort the configuration process and return to the profile summary page 2 2n nd d s st ta ag ge e P Pa ag ge e f fo or r P PI IN N L Lo og gi in n If you have selected...

Page 589: ...tem Description Back Button Description Enter text for the label of the hyperlink to return to the previous page PIN Code Message Enter text to be displayed as the body text on the page Default Countr...

Page 590: ...summary page 4 4 W Wh hi it te el li is st t S Se et tt ti in ng g In this step you can configure the whitelist settings Users are allowed to send and receive traffic that satisfies whitelist settings...

Page 591: ...the configuration on this page and proceed to the next page Cancel Click to abort the configuration process and return to the profile summary page 5 5 M Mo or re e O Op pt ti io on ns s In this step...

Page 592: ...he operating system s built in Captive Portal Detection Landing Page After Authentication Specifies the webpage that will be displayed after the user has successfully authenticated Fixed URL The user...

Page 593: ...vailable settings are explained as follows Item Description Select Columns to Filter Users Simply specify the profile and the login method for filtering users who want to access Internet through the l...

Page 594: ...ogin Info online offline status for the device can be send on the field of Devices and historical information for device login will be shown on the field of Login History In addition to forcefully log...

Page 595: ...base Clear User Info The user information will be displayed on the page of User Info You can delete the information by clicking this button Notification and Action when Storage Exceeded Notification D...

Page 596: ...ment introduces how to create Facebook APP and generate the APP ID and APP secret that can be used in Web Portal setup 1 Register as FB Developer Go to https developers facebook com and login the FB a...

Page 597: ...igor2862 Series User s Guide 581 6 Add a New App Click on My Apps Add a New App Choose Website platform 7 Click Skip and Create App ID on first use Type Display Name Choose Category Click Create App I...

Page 598: ...Vigor2862 Series User s Guide 582 8 Pops up security check window select the answer and then click Submit to finish the process...

Page 599: ...Add Platform on My Apps Go to Settings then click Add Platform 11 Choose Website in Select Platform window 12 Enter the Site URL as http portal draytek com Note If you change http port in the vigor pl...

Page 600: ...4 13 Set up Client OAuth Go to Settings Advanced Client OAuth Settings enter http portal draytek com in Valid OAuth redirect URIs and save changes 14 Go to My Apps Status Review and switch available s...

Page 601: ...Vigor2862 Series User s Guide 585...

Page 602: ...LAN clients by their Google or Facebook account This document introduces how to create Facebook APP and generate the APP ID and APP secret that can be used in Web Portal setup 1 Create Developer proj...

Page 603: ...er name Set Authorized JavaScript origins and Authorized redirect URLs as http portal draytek com and click Create Note If you change http port in the vigor please add http port in URLs For example we...

Page 604: ...PN N Vigor2862 can build virtual private network VPN between itself and any other TR 069 CPE by the function of central VPN management In addition it can be treated as a server called CVM server whic...

Page 605: ...nism V VI II I 5 5 1 1 1 1 G Ge en ne er ra al l S Se et tt ti in ng gs s To enable the CVM feature the first thing you have to do is enabling CVM port or CVM SSL Port Available settings are explained...

Page 606: ...ent is operated through IPsec VPN connection Available settings are explained as follows Item Description IPsec Mode Choose Aggressive or Main as the IPsec Mode Security Method Choose one of the follo...

Page 607: ...seen with icons from this page Before using such feature make sure the CVM port has been enabled and configured properly V VI II I 5 5 2 2 1 1 M Ma an na ag ge ed d D De ev vi ic ce e L Li is st t Th...

Page 608: ...naged by Vigor2862 series Edit To modify the name and location of specific CPE click the one you want and click the Edit button A pop up window will appear Simply change the name and or location manua...

Page 609: ...played in such field Add Move the selected device from Unmanaged Devices List to Managed Devices List IP Address Display the IP address of the remote device Mac Address Display the MAC address of the...

Page 610: ...xplained as follows Item Description Refresh Click it to refresh current page USB Disk It means a USB disk connecting to Vigor2862 It means no USB disk connecting to Vigor2862 Disk Usage When a USB di...

Page 611: ...rs Info When restoring configuration to a CPE make sure the configuration file you selected was backup from this CPE before Because restoring from another device s configuration file may cause serious...

Page 612: ...ne Firmware Upgrade It means such profile will be used for firmware upgrade File Path When Config Restore is selected as Action Type click Select to upload a configuration file from the connected USB...

Page 613: ...Vigor2862 Series User s Guide 597...

Page 614: ...N to LAN profile It is generated automatically when you click the PPTP IPsec Advanced button to build the VPN connection between Vigor2862 and remote CPE Type Display the dial in type and the authenti...

Page 615: ...you want to display the related information on the following table Stop record when fulls when the capacity of CVM log is full the system will stop recording Always record the new event only the newes...

Page 616: ...series For this section we use Vigor2850 series as the example All the CPE configuration will be done through Vigor2850 series C Co on nf fi ig gu ur re e C CV VM M S Se et tt ti in ng gs s o on n V...

Page 617: ...ample IE Mozilla Firefox or Netscape and type http 192 168 1 1 2 Open System Maintenance TR 069 3 In the field of ACS Server type the URL IP address with port number of Vigor2862 series and type the s...

Page 618: ...management access control and click OK 6 Open WAN Internet Access Use the drop down list of Access Mode on WAN1 to select MPoA RFC1483 2684 Then click Details Page 7 Click Specify an IP address Type c...

Page 619: ...n to the web user interface of Vigor2862 series 2 Open Central VPN Management VPN Management Now there is one CPE displayed on the field of Unmanaged Devices List 3 Choose the one Vigor2850 from Unman...

Page 620: ...or r2 28 86 62 2 s se er ri ie es s When a remote device is managed by Vigor2862 series it is easy to build VPN between these two devices 1 Access into the web user interface of Vigor2862 series 2 Op...

Page 621: ...VPN will be generated automatically You can access into VPN and Remote Access LAN to LAN of the remote device for viewing the detailed information Note The profile name is created automatically by th...

Page 622: ...r the device e g Vigor2850 managed by Vigor2862 series Vigor2850 as an example is chosen for Vigor2862 to perform the CPE firmware upgrade remotely in this case 1 Plug in USB storage disk onto Vigor28...

Page 623: ...o perform firmware upgrade from Device Name drop down list From the Action Type choose Firmware Upgrade Type the file path of the newest firmware or click Select to locate it Specify the Schedule prof...

Page 624: ...the managed device if the firmware upgrade is successful or not Click Managed Devices List Click the icon of Vigor2850 and click Edit and view the software version Another way to check if the firmware...

Page 625: ...st wireless coverage will be clearly indicated through simulated signal strength A AP P M Ma ai in nt te en na an nc ce e Vigor router can execute configuration backup configuration restoration firmwa...

Page 626: ...Da as sh hb bo oa ar rd d This page shows VigorAP s information about Status Event Log Total Traffic or Station Number by displaying VigorAP icon text and histogram Just move and click your mouse cur...

Page 627: ...router will be displayed here IP Address Display the true IP address of the access point SSID Display the SSID configured for the access point s connected to Vigor2862 Ch Display the channel used by t...

Page 628: ...by such wireless profile Security Display the security mode selected by such wireless profile Multi SSID Enable means multiple SSIDs more than one are active Disable means only SSID1 is active WLAN A...

Page 629: ...pplied to the selected access point immediately Later the access point will reboot To Local WLAN Profile configured in this page is specified for VigorAP connected to Vigor router If required these se...

Page 630: ...de 614 H Ho ow w t to o e ed di it t t th he e w wi ir re el le es ss s L LA AN N p pr ro of fi il le e 1 Select the WLAN profile index number 1 to 5 you want to edit 2 Click the index number link to...

Page 631: ...er s Guide 615 Info The function of Auto Provision is available for the default WLAN profile 3 After finished the general settings configuration click Next to open the following page for 2 4G wireless...

Page 632: ...ove web page configuration click Next to open the following page for 5G wireless security settings 5 When you finished the above web page configuration click Finish to exit and return to the first pag...

Page 633: ...e Others functions e g Config Restore Firmware Upgrade Remote Reboot can be performed to more than one AP at one time by using Vigor2862 Available settings are explained as follows Item Description Ac...

Page 634: ...ing and dropping available VigorAP icon from the list to the floor plan the placement with the best wireless coverage will be clearly indicated through simulated signal strength Available settings are...

Page 635: ...age Available settings are explained as follows Item Description Location Profile Name Type a name e g 3F for the AP map profile Upload Map Click the Select button to choose an image file only JPG and...

Page 636: ...w a red line for length width Then type the value on the pop up dialog to determine the real distance The values for length and width will be displayed on the web page 4 Click Next to open the web pag...

Page 637: ...s Guide 621 5 Select the AP you need drag and drop an AP icon from upper end to the map on the bottom 6 Check the box of Show AP Coverage and choose 2 4GHz or 5GHz of wireless signal for the AP locat...

Page 638: ...Vigor2862 Series User s Guide 622 7 Adjust the AP on the map to find out which place can have the best wireless coverage At last click Save...

Page 639: ...se one of the managed Access Points LAN A or LAN B daily or weekly for viewing data transmission chart Click Refresh to renew the graph at any time The horizontal axis represents time the vertical axi...

Page 640: ...imum temperature minimum temperature and average temperature V VI II I 6 6 8 8 R Ro og gu ue e A AP P D De et te ec ct ti io on n It displays the access point scanned by Vigor router In which the APs...

Page 641: ...lay the encryption mode used by the access point Signal Display the signal strength represented by percentage sent by the access point Beacon Period Display the period time of the beacon The beacon si...

Page 642: ...AP shall be treated as rogue AP simply click Add to change its classification from unknown to Rogue Delete From Rogue APs If you want to change the classification of the rogue AP simply choose the on...

Page 643: ...g for all of the APs managed by Vigor router will be shown on this page It is userful for troubleshooting if required V VI II I 6 6 1 10 0 T To ot ta al l T Tr ra af ff fi ic c Such page will display...

Page 644: ...what mode of wireless connection 2 4G WLAN or 5G WLAN used by wireless clients to access into Internet through VigorAP V VI II I 6 6 1 12 2 L Lo oa ad d B Ba al la an nc ce e The parameters configured...

Page 645: ...reshold Upload Limit Use the drop down list to specify the traffic limit for uploading Download Limit Use the drop down list to specify the traffic limit for downloading Action When Threshold Exceeded...

Page 646: ...862 Series User s Guide 630 V VI II I 6 6 1 13 3 F Fu un nc ct ti io on n S Su up pp po or rt t L Li is st t List the AP management functions that the Access Points support under different firmware ve...

Page 647: ...he access points linked to Vigor2862 1 Open External Devices Access Point Devices Vigor2862 will detect the AP connecting to the router automatically and display as below In this case a device named w...

Page 648: ...sary for you to manually apply wireless profiles for APs respectively Such feature will be convenient for people who want to quickly deploy multiple Vigor APs in a large exhibition to reach the goal o...

Page 649: ...modify related settings for 5G SSID of managed AP Continue to make any changes you want After finished all of the changes simply click Finish 6 Now the AP represented with AP800_00507F6EE4980 detecte...

Page 650: ...t one time V VI II I 7 7 1 1 S St ta at tu us s V VI II I 7 7 1 1 1 1 S Sw wi it tc ch h S St ta at tu us s Such page displays information including Group Switch name IP address model System Up Time P...

Page 651: ...the name link of VigorSwitch You can click the name link to access into the switch profile IP Address Display the IP address of VigorSwitch Model Display the model name of VigorSwitch System Up Time D...

Page 652: ...wi it tc ch h H Hi ie er ra ar rc ch hy y Such page displays the hierarchy of VigorSwitch es managed under Vigor2862 Please note that Shutdown Port is available for LAN port of VigorSwitch connects to...

Page 653: ...nnected VigorSwitch will have one setting profile If there are many switches connected to Vigor2862 different index number will be used to represent different VigorSwitch Name Display the user defined...

Page 654: ...d is unavailable Login Password Display the original login password for the VigorSwitch However if Group Password in Central Management Switch Group is configured with other string then such field is...

Page 655: ...configuration Then click Port tab to access the following page Available settings are explained as follows Item Description Description If required type a brief description to explain the device conne...

Page 656: ...ate egress rate for the selected VigorSwitch After clicking Save the value modified in this page will be written to VigorSwitch and enabled 4 Click Save to save the changes and then click Send to Devi...

Page 657: ...g to Vigor2862 series All of the switches under the same group can be accessed into via such group password Existing Switch Display all of the VigorSwitch devices connecting to Vigor2862 Member Switch...

Page 658: ...e Four actions including configuration backup configuration restore remote reboot and factory reset are offered by Vigor2862 to perform on VigorSwitch File Path Click the button to find out the requir...

Page 659: ...ll be recorded to the database or the system will send an alert to the specified device via e mail or SMS to warn the user V VI II I 7 7 5 5 1 1 A Al le er rt t S Se et tu up p This page is used to de...

Page 660: ...nabled in default Send Notification If it is checked Vigor router s system will send notification to specified phone number via SMS SMS Email Service Object Choose the SMS object which will get the SM...

Page 661: ...ent At present Cold Start Warm Start Disconnect and Reconnect will be treated as alert events Level Specify the severity level for each incident To defined more severity level for choosing in this pag...

Page 662: ...o four levels No Alert Minor Alert Moderate Alert and Major Alert Check the one s you want to check in Alert Logs list Type Check the type switch port of the log to be displayed in Alert Logs list Swi...

Page 663: ...ox to make the database in USB disk to record the alert logs and traffic history Notification and Action when Storage Exceeded Notification Don t send notification No notification will be sent out whe...

Page 664: ...Vigor2862 Series User s Guide 648 V VI II I 7 7 7 7 S Su up pp po or rt t L Li is st t This page lists all models of VigorSwitch which can be managed by Vigor2862 via Central Management Switch...

Page 665: ...able settings are explained as follows Item Description External Device Syslog Check this box to display information of the detected device on Syslog External Device Auto Discovery Check this box to d...

Page 666: ...Vigor2862 Series User s Guide 650 When you finished the configuration click OK to save it Info Only DrayTek products can be detected by this function...

Page 667: ...dress service type keyword file extension and others These pre defined objects can be applied in CSM USB device connected on Vigor router can be regarded as a server or WAN interface By way of Vigor r...

Page 668: ...ies User s Guide 652 V VI II II I 1 1 O Ob bj je ec ct ts s S Se et tt ti in ng gs s Define objects such as IP address service type keyword file extension and others These pre defined objects can be a...

Page 669: ...ed range usually will be applied in configuring router s settings therefore we can define them with objects and bind them with groups for using conveniently Later we can select that object group for a...

Page 670: ...Subnet Address Mac Address or all that IP object with the selected type will be shown on this page Set to Factory Default Clear all profiles Search Type a string of the IP object that you wan to sear...

Page 671: ...wnload to store the default CSM template a table without any input data to your hard disk Download Download the CSV file from Vigor router and store in your hard disk Restore IP Object Select Click it...

Page 672: ...bject contains any IP address Select Mac Address if this object contains Mac address MAC Address Type the MAC address of the network card which will be controlled Start IP Address Type the start IP ad...

Page 673: ...s are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile To set a new pr...

Page 674: ...interface chosen above will be shown in this box Selected IP Objects Click button to add the selected IP objects in this box 3 After finishing all the settings here please click OK to save the config...

Page 675: ...dress if this object contains several IPv6s within a range Select Subnet Address if this object contains one subnet for IPv6 address Select Any Address if this object contains any IPv6 address Select...

Page 676: ...6 6 G Gr ro ou up p This page allows you to bind several IPv6 objects into one IPv6 group Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index D...

Page 677: ...profile Maximum 15 characters are allowed Available IPv6 Objects All the available IPv6 objects with the specified interface chosen above will be shown in this box Selected IPv6 Objects Click button t...

Page 678: ...bj je ec ct t You can set up to 96 sets of Service Type Objects with different conditions Available settings are explained as follows Item Description Set to Factory Default Clear all profiles Index...

Page 679: ...columns are available for TCP UDP protocol It can be ignored for other protocols The filter rule will filter out any port number when the first and last value are the same it indicates one port when t...

Page 680: ...1 6 6 S Se er rv vi ic ce e T Ty yp pe e G Gr ro ou up p This page allows you to bind several service types into one group Available settings are explained as follows Item Description Set to Factory...

Page 681: ...ngs are explained as follows Item Description Name Type a name for this profile Maximum 15 characters are allowed Available Service Type Objects All the available service objects that you have added o...

Page 682: ...et 200 keyword object profiles for choosing as black white list in CSM URL Web Content Filter Profile Available settings are explained as follows Item Description Set to Factory Default Clear all prof...

Page 683: ...are explained as follows Item Description Name Type a name for this profile e g game Maximum 15 characters are allowed Contents Type the content for such profile For example type gambling as Contents...

Page 684: ...ngs are explained as follows Item Description Set to Factory Default Clear all profiles Index Display the profile number that you can configure Name Display the name of the group profile Objects Displ...

Page 685: ...box 3 After finishing all the settings please click OK to save the configuration V VI II II I 1 1 9 9 F Fi il le e E Ex xt te en ns si io on n O Ob bj je ec ct t This page allows you to set eight prof...

Page 686: ...s 2 The configuration page will be shown as follows Available settings are explained as follows Item Description Profile Name Type a name for this profile The maximum length of the name you can set is...

Page 687: ...e Each item is explained as follows Item Description Set to Factory Default Clear all of the settings and return to factory default settings Index Display the profile number that you can configure Pro...

Page 688: ...use to register to selected SMS provider The maximum length of the name you can set is 31 characters Password Type a password that the sender can use to register to selected SMS provider The maximum...

Page 689: ...o make customized SMS service The profile name for Index 9 and Index 10 are fixed You can click the number e g 9 under Index column for configuration in details Available settings are explained as fol...

Page 690: ...e router will send out Sending Interval Type the shortest time interval for the system to send SMS After finishing all the settings here please click OK to save the configuration M Ma ai il l S Se er...

Page 691: ...pe the IP address of the mail server SMTP Port Type the port number for SMTP server Sender Address Type the e mail address of the sender Use SSL Check this box to use port 465 for SMTP server for some...

Page 692: ...I 1 1 1 11 1 N No ot ti if fi ic ca at ti io on n O Ob bj je ec ct t This page allows you to set ten profiles which will be applied in Application SMS Mail Alert Service You can set an object with dif...

Page 693: ...is 15 characters Category Display the types that will be monitored Status Display the status for the category You can check the box to be monitored For example the check box of CPE firmware upgrade f...

Page 694: ...s are explained as follows Item Description Add Click it to open the following page for adding a new string object Set to Factory Default Click it to clear all of the settings in this page Index Displ...

Page 695: ...ked by the Vigor router s Firewall The country object by grouping IP addresses for multiple countries can be applied by other functions such as router policy destination refer to the following figure...

Page 696: ...or such profile The maximum length of the name you can set is 15 characters Available Country Selected Country Select any country from Available Country Click to move the selected country and place on...

Page 697: ...Log into the web user interface of Vigor router 2 Configure relational objects first Open Object Settings SMS Mail Server Object to get the following page Index 1 to Index 8 allows you to choose the b...

Page 698: ...ofile setting 5 Open Object Settings Notification Object to configure the event conditions of the notification 6 Choose any index number e g Index 1 in this case to configure conditions for sending th...

Page 699: ...choose SMS Provider and the Notify Profile specify the time of sending SMS Then type the phone number in the field of Recipient the one who will receive the SMS 9 Click OK to save the settings Later...

Page 700: ...P Pr ro ov vi id de er r Choose one of the Index numbers 9 or 10 allowing you to customize the SMS Provider In the web page type the URL string of the SMS provider and type the username and password...

Page 701: ...USB Application you can type the IP address of the Vigor router and username password created in USB Application USB User Management on the client software Then the client can use the FTP site USB st...

Page 702: ...e USB storage disk into the Vigor router please make sure the memory format for the USB storage disk is FAT16 or FAT32 It is recommended for you to use FAT32 for viewing the filename completely FAT16...

Page 703: ...ers Both them cannot contain any of the following Workgroup Name Type a name for the workgroup Host Name Type the host name for the router Printer Server Enable Click it to make Vigor router act as a...

Page 704: ...Note FTP Passive mode is not supported by Vigor Router Please disable the mode on the FTP client Password Type the password for FTP SMB users for accessing FTP server Later you can open FTP client sof...

Page 705: ...u have to insert a USB storage disk into the USB interface of the Vigor router Otherwise you cannot save the configuration V VI II II I 2 2 3 3 F Fi il le e E Ex xp pl lo or re er r File Explorer offe...

Page 706: ...rst And then remove the USB device later Available settings are explained as follows Item Description Connection Status If there is no USB device connected to Vigor router No Disk Connected will be sh...

Page 707: ...communications room is overheating During summer in particular it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures The inclu...

Page 708: ...t Choose the display unit of the temperature There are two types for you to choose Alarm Settings Enable Syslog Alarm The temperature log will be recorded on Syslog if it is enabled Upper temperature...

Page 709: ...s User s Guide 693 V VI II II I 2 2 6 6 M Mo od de em m S Su up pp po or rt t L Li is st t Such page provides the information about the brand name and model name of the USB modems which are supported...

Page 710: ...uide 694 V VI II II I 2 2 7 7 S SM MB B C Cl li ie en nt t S Su up pp po or rt t L Li is st t SMB Client Support List provides the test status information for applications with file sharing operated u...

Page 711: ...USB Applicaiton File Explorer If it is necessary for you to delete copy files on the device or write paste files to the devcie it must be done through SMB server or FTP server SMB service is based on...

Page 712: ...Vigor2862 Series User s Guide 696...

Page 713: ...User Management Click Enable to enable FTP SMB User account Here we add a new account user1 and assign authorities Read Write and List to it 4 Click OK to save the configuration 5 Make sure the FTP s...

Page 714: ...B Application USB Device Status The information for FTP server will be shown as below Now users in LAN of Vigor2862 can access into the USB storage device by typing ftp 192 168 1 1 on any browser They...

Page 715: ...e 699 P Pa ar rt t X XI I T Tr ro ou ub bl le es sh ho oo ot ti in ng g This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and fin...

Page 716: ...to check your basic installation status stage by stage Checking if the hardware status is OK or not Checking if the network connection settings on your computer are OK or not Pinging the router from...

Page 717: ...router X XI I 1 1 1 1 D Di ia al l o ou ut t T Tr ri ig gg ge er ri in ng g Click Diagnostics and click Dial out Triggering to open the web page The internet connection e g PPPoE is triggered by a pac...

Page 718: ...Click it to reload the page X XI I 1 1 2 2 R Ro ou ut ti in ng g T Ta ab bl le e Click Diagnostics and click Routing Table to open the web page Available settings are explained as follows Item Descri...

Page 719: ...ss Resolution Protocol cache held in the router The table shows a mapping between an Ethernet hardware address MAC Address and an IP address Available settings are explained as follows Item Descriptio...

Page 720: ...g between an Ethernet hardware address MAC Address and an IPv6 address This information is helpful in diagnosing network problems such as IP address conflicts etc Click Diagnostics and click IPv6 Neig...

Page 721: ...Table to open the web page Available settings are explained as follows Item Description Index It displays the connection item number IP Address It displays the IP address assigned by this router for s...

Page 722: ...settings are explained as follows Item Description Private IP Port It indicates the source IP address and port of local PC Pseudo Port It indicates the temporary port of the router used for NAT Peer...

Page 723: ...displayed on Diagnostics DNS Cache Table Available settings are explained as follows Item Description Clear Click this link to remove the result on the window Refresh Click it to reload the page When...

Page 724: ...agnostics and click Ping Diagnosis to open the web page or Available settings are explained as follows Item Description IPV4 IPV6 Choose the interface for such function Ping through Use the drop down...

Page 725: ...result on the window X XI I 1 1 9 9 D Da at ta a F Fl lo ow w M Mo on ni it to or r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of sever...

Page 726: ...the system automatically Refresh Click this link to refresh this page manually Index Display the number of the data flow IP Address Display the IP address of the monitored device TX rate kbps Display...

Page 727: ...S Use the drop down list to change the priority in data transmission for the specified IP address host Current Peak Speed Current means current transmission rate and receiving rate for WAN interface P...

Page 728: ...eset to zero the accumulated RX TX received and transmitted data of WAN Click Refresh to renew the graph at any time The horizontal axis represents time Yet the vertical axis has different meanings Fo...

Page 729: ...Vigor2862 Series User s Guide 713 X XI I 1 1 1 11 1 V VP PN N G Gr ra ap ph h Click Diagnostics and click VPN Graph to open the web page...

Page 730: ...e routes from router to the host Simply type the IP address of the host in the box and click Run The result of route trace will be shown on the screen or Available settings are explained as follows It...

Page 731: ...eb b S Sy ys sl lo og g This page displays the time and message for User Firewall call WAN VPN settings You can check Enable Web Syslog specify the type of Syslog and choose the display mode you want...

Page 732: ...age disk Available settings are explained as follows Item Description Time Display the time of the event occurred Log Type Display the type of the record Message Display the information for each event...

Page 733: ...All of the routers under the same DARP DrayTek Address resolution Protocol group can be viewed in such page However only partial information of the router status will be displayed Vigor routers with...

Page 734: ...the primary router in HA Secondary means such router stands for the secondary router in HA Stable No means the primary router has not been determined yet DARP is negotiating YES means the primary rout...

Page 735: ...s se er r L Li is st t Such page displays authentication jobs made by Internal RADIUS or Local 802 1X When the mouse cursor moves to the name link under User Name the connection message including auth...

Page 736: ...or All to display related authentication information log Display Mode Choose the mode you want to display the related information on the following table Stop record when fulls When the capacity of CVM...

Page 737: ...onment to find out if there is any abnormal connection Information of IP traced and destination port used for SYN Flood UDP Flood and ICMP Flood attacks will be detected and shown respectively on diff...

Page 738: ...following web page will be blocked forever Available settings are explained as follows Item Description Blocking IP Type the IP address in this field and click add It will be added to the IP List and...

Page 739: ...router can be traced or Available settings are explained as follows Item Description Mode Analyze a single packet Choose such mode to make Vigor router analyze how a single packet will be sent by a r...

Page 740: ...age Input File It is available when Analyze multiple packets is selected as Mode Select Click the download link to get a blank example file Then click such button to select that blank csv file for sav...

Page 741: ...hardware status 1 Check the power line and WLAN LAN cable connections Refer to I 2 Hardware Installation for details 2 Turn on the router Make sure the ACT LED blink once per second and the correspon...

Page 742: ...link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s Info The example is based on Windows 7 As to the examples for...

Page 743: ...r2862 Series User s Guide 727 4 Select Internet Protocol Version 4 TCP IP and then click Properties 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally clic...

Page 744: ...ide 728 F Fo or r M Ma ac c O OS S 1 Double click on the current used Mac OS on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop d...

Page 745: ...he router correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista 7 The DOS command dialo...

Page 746: ...Vigor2862 Series User s Guide 730...

Page 747: ...value configured in Vigor router Check if the LEDs on Vigor router are on or not If not please install an additional switch for connecting both Vigor router and the modem offered by ISP Then check if...

Page 748: ...c co on nn ne ec ct ti io on n d do oe es s n no ot t w wo or rk k Check the PIN Code of SIM card is disabled or not Please use the utility of 3G 4G USB Modem to disable PIN code and try again If it s...

Page 749: ...The password of factory default is null S So of ft tw wa ar re e R Re es se et t You can reset the router to factory default via Web page Such function is available in Admin Mode only Go to System Ma...

Page 750: ...or the router again to fit your personal request X XI I 8 8 C Co on nt ta ac ct ti in ng g D Dr ra ay yT Te ek k If the router still cannot work correctly after trying many efforts please contact your...

Page 751: ...he difficulty is how to handle the traffics between two or more Ethernet switches Thus VLAN is suitable for some circumstances for example the rental apartment SOHO office and so on These clients may...

Page 752: ...packet as the VID of Trunk port while forwarding the packets to another switch Bridge mode of WAN P1 and P2 are doing NAT flow to access to the internet but P3 and P4 will forward the packets between...

Page 753: ...Vigor2862 Series User s Guide 737...

Page 754: ...Vigor2862 Series User s Guide 738 LAN V VL LA AN N a ap pp pl li ic ca at ti io on ns s o on n V Vi ig go or r r ro ou ut te er r Multi Subnet VLAN of LAN...

Page 755: ...ver LAN1 LAN2 LAN3 LAN4 However the traffics of the LAN port or SSID that are NOT being grouped in the same VLAN are unable to forward to each other The benefit of Port based is able to extend the wir...

Page 756: ...to be isolated from your private network due to the security considerations it can be done by above settings However a switch support VLAN function is need if VLAN Tag enabled Triple Play Multi WAN N...

Page 757: ...Vigor2862 Series User s Guide 741...

Page 758: ...dge mode with VLAN Set top box STB or the other kinds of media devices are able to attach with Port4 or Port5 of LAN Those devices that attached with Port4 or Port5 are able to access the services net...

Page 759: ...Vigor2862 Series User s Guide 743 P Pa ar rt t X X T Te el ln ne et t C Co om mm ma an nd ds s...

Page 760: ...Windows Features of Telnet Client has been turned on under Control Panel Programs Type cmd and press Enter The Telnet terminal will be open later In the following window type Telnet 192 168 1 1 as be...

Page 761: ...ide 745 For users using previous Windows system e g 2000 XP simply click Start Run and type Telnet 192 168 1 1 in the Open box as below Next type admin admin for Account Password And type to get a lis...

Page 762: ...L setting S Sy yn nt ta ax x adsl status more counts hlog qln snr bandinfo olr E Ex xa am mp pl le e adsl status ATU R Info hw annex A f w annex Unknown Running Mode T1 413 State TRAINING DS Actual Ra...

Page 763: ...4 Multi 5 ADSL2 7 ADSL2_AnnexM 8 ADSL2 14 ADSL2 _AnnexM acqIP It means the way to acquire IP address Type the number to determine the IP address by specifying or assigned dynamically by DHCP server 0...

Page 764: ...bridge status save It means to save the configuration to flash enable It means to enable the Multi VLAN function disable It means to disable the Multi VLAN function on off It means to turn on off brid...

Page 765: ...mode DSL debug tool mode is off adsl idle tcpmessage Set DSL debug tool mode on Please reboot system to take effect adsl idle tcpmessage_off Set DSL debug tool mode off Please reboot system to take e...

Page 766: ...vel 5 for F5 End to End VC level chklink Check the DSL connection Log_on log_off Enable or disable the OAM log for debug E Ex xa am mp pl le e adsl oamlb chklink on OAM checking dsl link is ON adsl oa...

Page 767: ...remove ADSL mode set It means to use default settings plus the new added ADSL mode default It means to use default settings show It means to display current setting adsl_mode There are three modes to...

Page 768: ...em g vector status trellis retx default us ds bi us upstream ds downstream bi bidirection aelem and g vector can be only on off value The value shall be hex digits bitswap 0 2 sra 0 2 3 4 on off Type...

Page 769: ...79612f21 adsl vendorid on set vid0 vid1 User define CPE Vendor ID is ON T Te el ln ne et t C Co om mm ma an nd d a ad ds sl l a at tm m This command can set QoS parameter for ATM S Sy yn nt ta ax x a...

Page 770: ...Display a table for PVC binding group 1 It means to clear specific PVC binding E Ex xa am mp pl le e adsl pvcbinding 3 5 set done bind pvc3 to pvc5 The above example means PVC3 has been bound to PVC5...

Page 771: ...able Rate 0 bps US Attainable Rate 0 bps DS Path Mode Fast US Path Mode Fast DS Interleave Depth 0 US Interleave Depth 0 NE Current Attenuation 0 dB Cur SNR Margin 0 dB DS actual PSD 0 0 dB US actual...

Page 772: ...ow it is on continuous sending mode and vdsl2 2 led is always ON 5 Use vdsl reboot to restart dsl to normal mode T Te el ln ne et t C Co om mm ma an nd d v vd ds sl l r re eb bo oo ot t This command c...

Page 773: ...s trellis retx default us ds bi us upstream ds downstream bi bidirection aelem and g vector can be only on off value The value shall be hex digits bitswap 0 2 sra 0 2 3 4 on off Type on for enabling s...

Page 774: ...d d v vd ds sl l i in nv ve en nt to or ry y This command is used to display information about CO or CPE S Sy yn nt ta ax x vdsl inventory co cpe S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n P...

Page 775: ...o om mm ma an nd d c cs sm m a ap pp pe e s se et t It is used to configure group settings for IM P2P Protocol and Others in APP Enforcement Profile csm appe set i INDEX v GROUP e AP_IDX d AP_IDX a AP...

Page 776: ...how t Type Index Name Version Advance Advanced Option M essage F ile Transfer G ame C onference and O ther Activities PROTOCOL 52 DB2 PROTOCOL 53 DNS PROTOCOL 54 FTP PROTOCOL 55 HTTP 1 1 PROTOCOL 56 I...

Page 777: ...isable OTHERS TUNNEL 83 PGPNet Disable OTHERS TUNNEL 84 Ping Tunnel Disable Total 66 APPs T Te el ln ne et t C Co om mm ma an nd d c cs sm m a ap pp pe e i in nt te er rf fa ac ce e It is used to conf...

Page 778: ...filter profile S Sy yn nt ta ax x csm ucf show csm ucf setdefault csm ucf msg MSG csm ucf obj INDEX n PROFILE_NAME l P B A N uac wf csm ucf obj INDEX n PROFILE_NAME csm ucf obj INDEX p VALUE csm ucf o...

Page 779: ...Name game Log none Priority Select Bundle Pass Enable URL Access Control Action pass Prevent web access from IP address No Obj NO Object Name No Grp NO Group Name T Te el ln ne et t C Co om mm ma an n...

Page 780: ...any IP address will be blocked D Disable the function o Set the keyword object KEY_WORD_Object_Index Specify the index number of the object profile g Set the keyword group KEY_WORD_Group_Index Specif...

Page 781: ...SM profile e It means to enable the restriction of web feature d It means to disable the restriction of web feature a Set the action of web feature P or B B Block The web access meets the web feature...

Page 782: ...Description show It means to display the web content filter profiles Look It means to display the license information of WCF Cache It means to set the cache level for the profile Server WCF_SERVER It...

Page 783: ...ranc Illegal Drug Nudity Pornography Sexually Explicit Weapons Violence School Cheating Sex Education Tasteless Child Abuse Imges Entertainment Games Sports Travel Leisure Recreation Fashin Beauty Bus...

Page 784: ...v Tasteless v Child Abuse Images leisure Group Entertainment Games Sports Travel Leisure Recreation Fashion Beauty T Te el ln ne et t C Co om mm ma an nd d c cs sm m d dn ns sf f It means to configure...

Page 785: ...ckpage DNS sends block page for redirect port When a web page is blocked by DNS filter the router system will send a message page to describe that the page is not allowed to be visisted ON Enable the...

Page 786: ...w 1000 T Te el ln ne et t C Co om mm ma an nd d d do os s This command allows users to configure the settings for DoS defense system S Sy yn nt ta ax x dos V D A dos s ATTACK_F THRESHOLD TIMEOUT dos a...

Page 787: ...an nd d I In nt te er rn ne et t This command allows you to configure detailed settings for WAN connection S Sy yn nt ta ax x internet W n M n command parameter S Sy yn nt ta ax x D De es sc cr ri ip...

Page 788: ...l string Set PPP mode Modem Dial String max 31 characters v service name Set PPP mode Service Name max 23 characters m ppp username Set PPP mode PPP Username max 63 characters o ppp password Set PPP m...

Page 789: ...nable Disable S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description Enable Enable the function Disable Disable the function E Ex xa am mp pl le e ip 2ndsubnet enable 2nd subnet en...

Page 790: ...bnet mask E Ex xa am mp pl le e ip pubmask ip pubmask public subnet mask Now 255 255 255 0 ip pubmask 255 255 0 0 Set public subnet mask done T Te el ln ne et t C Co om mm ma an nd d i ip p a au ux x...

Page 791: ...nd d i ip p a ad dd dr r This command allows users to set add a specified LAN IP your router S Sy yn nt ta ax x ip addr IP address S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Descr...

Page 792: ...ws users to review current status for the arp table arp accept allows to accept or reject the source destination MAC address arp setCacheLife allows users to configure the duration in which ARP caches...

Page 793: ...r c option number x option value ip dhcpc option u idx unmber ip dhcpc release wan number ip dhcpc renew wan number ip dhcpc status S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Descr...

Page 794: ...IP address It means the WAN IP address WAN1 PVC3 PVC4 PVC5 It means the WAN port PVC that the above IP address passes through E Ex xa am mp pl le e ip ping 172 16 3 229 WAN1 Pinging 172 16 3 229 with...

Page 795: ...ddress Port S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description IP address Type the WAN or LAN IP address of the remote device Port Type a port number e g 23 Available settings...

Page 796: ...erface 1 Enable the function of setting RIP of WAN IP 0 Disable the function E Ex xa am mp pl le e ip wanrip Valid ex ip wanrip ifno e 0 1 ifno 1 WAN1 2 WAN2 3 PVC3 4 PVC4 5 PVC5 e 0 1 0 disable 1 ena...

Page 797: ...ddress of the destination netmask It means the netmask of the specified IP address gateway It means the gateway of the connected router ifno It means the connection interface 3 WAN1 5 WAN3 6 WAN4 7 WA...

Page 798: ...e proxy server for using On off show help It means to turn on off display or get more information of the T_home service query It means to set IGMP general query interval The default value is 125000 ms...

Page 799: ...or exceeding session limit and set how many seconds the IP session block works S Sy yn nt ta ax x ip session on ip session off ip session default num ip session defaultp2p num ip session status ip ses...

Page 800: ...sion number is 100 T Te el ln ne et t C Co om mm ma an nd d i ip p b ba an nd dw wi id dt th h This command allows users to set maximum bandwidth limit number for the specified IP S Sy yn nt ta ax x i...

Page 801: ...ndmac strict_on ip bindmac show ip bindmac add IP MAC Comment ip bindmac del IP all S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description on It means to turn on IP bandmac policy...

Page 802: ...eries User s Guide 786 E Ex xa am mp pl le e ip bindmac add 192 168 1 46 00 50 7f 22 33 55 just for test ip bindmac show ip bind mac function is turned ON IP 192 168 1 46 bind MAC 00 50 7f 22 33 55 Co...

Page 803: ...in several commands in one line General Setup for Policy Route i value Specify an index number for setting policy route profile Value 1 to 60 1 means to get a free policy index automatically e 0 1 0 D...

Page 804: ...olicy route profile Value Type a number 0 250 The default value is 150 I value Indicate the interface specified for the policy route profile Value Available interfaces include LAN1 LAN8 IP_Routed_Subn...

Page 805: ...iagnose s 192 168 1 100 d any p any t ICMP Matched Route Priority No_Match Matched Policy Priority Policy_1 200 Conclusion The packet was dropped because the send to interface of the mat ched policy p...

Page 806: ...ma an nd d i ip p6 6 a ad dd dr r This command allows users to set the IPv6 address for your router S Sy yn nt ta ax x ip6 addr s prefix prefix length LAN WAN1 WAN2 iface ip6 addr d prefix prefix leng...

Page 807: ...s It means to ask the SIP S It means to ask the SIP name d It means to ask the DNS setting D It means to ask the DNS name n It means to ask NTP i It means to ask NIS I It means to ask NIS name p It me...

Page 808: ...d request IA_PD whose IAID equals to 2008 ip6 dhcp client WAN2 n 1023456 ip6 dhcp client WAN2 a Interface WAN2 has following DHCPv6 client settings DHCPv6 client enabled request IA_NA whose IAID equal...

Page 809: ...to configure settings for accessing Internet S Sy yn nt ta ax x ip6 internet W n M n command parameter S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description W n W means to set WA...

Page 810: ...6 address for first DNS server D server It means to set the secondary DNS Server IP server type an IPv6 address for second DNS server t dhcp ra none It means to set IPv6 PPP WAN test mode for DHCP or...

Page 811: ...neighbour d It means to delete a neighbour a It means to show neighbour status inet6_addr Type an IPv6 address eth_addr Type submask address LAN WAN1 WAN2 Specify an interface for the neighbor E Ex x...

Page 812: ...ed T Te el ln ne et t C Co om mm ma an nd d i ip p6 6 r ro ou ut te e This command allows you to S Sy yn nt ta ax x ip6 route s prefix prefix length gateway LAN WAN1 WAN2 iface D ip6 route d prefix pr...

Page 813: ...t ta ax x ip6 ping IPV6 address Host LAN WAN1 WAN2 S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description IPV6 address Host It means to specify the IPv6 address or host for ping LA...

Page 814: ...1 7F8 1 A501 5169 1 330 ms 6 2001 4860 1 0 4B3 350 ms 7 2001 4860 8 0 2DAF 330 ms 8 2001 4860 2 0 66E 340 ms 9 Request timed out 10 2001 4860 4860 8888 350 ms Trace complete T Te el ln ne et t C Co om...

Page 815: ...is not a default router and should not appear on the default router list Type the number unit second you want V It means to show the RADVD configuration r It means RA default test r num It means RA t...

Page 816: ...e ip6 mngt list add 1 FE80 250 7FFF FE12 1010 128 ip6 mngt list add 2 FE80 250 7FFF FE12 1020 128 ip6 mngt list add 3 FE80 250 7FFF FE12 2080 128 ip6 mngt list IPv6 Access List Index IPv6 Prefix Prefi...

Page 817: ...ri ip pt ti io on n Parameter Description ifno It means the connection interface 1 WAN1 2 WAN2 add It means to add an IPv6 address which can be used to execute management through Internet prefix It me...

Page 818: ...ew VcdhrtzZ S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description V It means to show the version of this IP filter c It means to show the running call filter rules d It means to s...

Page 819: ...f blocked packet Type 3 to display the log of non matching packet p VALUE It means to setup actions for packet not matching any rule e g p 1 Type 0 to let all the packets pass Type 1 to block all the...

Page 820: ...rule s r command parameter ipf rule s r v S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description s Such word means Filter Set range form 1 12 r Such word means Filter Rule range fr...

Page 821: ...ect g indicates group obj indicates index number of object or index number of group Available settings range from 1 192 For example d g 1 means the first destination IP group profile S o g obj It mean...

Page 822: ...age 0 None 1 ANSI 1250 Central Europe 2 ANSI 1251 Cyrillic 3 ANSI 1252 Latin I 4 ANSI 1253 Greek 5 ANSI 1254 Turkish 6 ANSI 1255 Hebrew 7 ANSI 1256 Arabic 8 ANSI 1257 Baltic 9 ANSI 1258 Viet Nam 10 OE...

Page 823: ...sable CodePage ANSI 1252 Latin I Window size 65535 Session timeout 1440 DrayTek Banner Enable Strict Security Checking APP Enforcement T Te el ln ne et t C Co om mm ma an nd d i ip pf f f fl lo ow wt...

Page 824: ...o 0 REPLY 8 8 8 8 53 192 168 1 11 15073 ifno 3 proto 17 age 93025100 2000 flag 203 ORIGIN 192 168 1 11 7247 8 8 8 8 53 ifno 0 REPLY 8 8 8 8 53 192 168 1 11 7247 ifno 3 proto 17 age 93020100 7000 flag...

Page 825: ...880fdd4 Client IP 0 0 0 0 Your IP 0 0 0 0 Next server IP 0 0 0 0 Relay agent IP 0 0 0 0 25 36 49 580 DHCP WAN 5 Len 548XID 0x7880fdd4 Client IP 0 0 0 0 Your IP 0 0 0 0 Next server IP 0 0 0 0 Relay age...

Page 826: ...tpsport Https port S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description Https port It means to type the number for HTTPS port The default setting is 443 E Ex xa am mp pl le e mng...

Page 827: ...ption enable It means to activate FTP server function disable It means to inactivate FTP server function E Ex xa am mp pl le e mngt ftpserver enable FTP server has been enabled mngt ftpserver disable...

Page 828: ...f It means to inactivate the function of defense worm packet out add port It means to add a new TCP port for block del port It means to delete a TCP port for block viewlog It means to display a log of...

Page 829: ...en enabled mngt rmtcfg ftp on FTP server has been enabled T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t l la an na ac cc ce es ss s This command allows users to manage accessing into Vigor rou...

Page 830: ...ess the router T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t e ec ch ho oi ic cm mp p This command allows users to reject or accept PING packets from the Internet S Sy yn nt ta ax x mngt echoi...

Page 831: ...255 255 0 T Te el ln ne et t C Co om mm ma an nd d m mn ng gt t s sn nm mp p This command allows you to configure SNMP for management S Sy yn nt ta ax x mngt snmp command parameter S Sy yn nt ta ax x...

Page 832: ...multi subnet S Sy yn nt ta ax x msubnet switch 2 3 4 5 6 On Off S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 2 3 4 5 6 It means LAN interface 2 LAN2 3 LAN3 4 LAN4 5 LAN5...

Page 833: ...ax x msubnet nmask 2 3 4 5 6 IP address S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 2 3 4 5 6 It means LAN interface 2 LAN2 3 LAN3 4 LAN4 5 LAN5 6 LAN6 IP address Type...

Page 834: ...cription 2 3 4 5 6 It means LAN interface 2 LAN2 3 LAN3 4 LAN4 5 LAN5 6 LAN6 On Off On means enabling the DHCP server for the specified LAN interface Off means disabling the DHCP server E Ex xa am mp...

Page 835: ...o configure an IP address as the gateway used for subnet S Sy yn nt ta ax x msubnet gateway 2 3 4 Gateway IP S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 2 3 4 5 6 It mea...

Page 836: ...msubnet talk 1 2 3 4 5 6 1 2 3 4 5 6 On Off S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description 1 2 3 4 5 6 It means LAN interface 1 LAN1 2 LAN2 3 LAN3 4 LAN4 5 LAN5 6 LAN6 On O...

Page 837: ...d to reboot the router msubnet startip msubnet startip 2 3 4 5 6 Gateway IP Now LAN2 192 168 2 90 LAN3 192 168 3 10 LAN4 192 168 4 10 LAN5 192 168 5 1 0 LAN6 192 168 6 10 T Te el ln ne et t C Co om mm...

Page 838: ...4 5 6 It means LAN interface 2 LAN2 3 LAN3 4 LAN4 5 LAN5 6 LAN6 count Choose the following number for specifying different node type 1 B node 2 P node 4 M node 8 H node 0 Not specify any type for nod...

Page 839: ...4 5 6 WINS IP Now LAN2 192 168 3 5 LAN3 0 0 0 0 LAN4 0 0 0 0 LAN5 0 0 0 0 LAN6 0 0 0 0 T Te el ln ne et t C Co om mm ma an nd d m ms su ub bn ne et t s se ec cW WI IN NS S This command is used to conf...

Page 840: ...ver E Ex xa am mp pl le e msubnet tftp msubnet tftp 2 3 4 5 6 TFTP server name Now LAN2 LAN3 LAN4 LAN5 LAN6 msubnet tftp 2 publish Set LAN2 TFTP Server Name done msubnet tftp msubnet tftp 2 3 4 5 6 TF...

Page 841: ...rofile S Sy yn nt ta ax x object ip obj setdefault object ip obj INDEX v object ip obj INDEX n NAME object ip obj INDEX i INTERFACE object ip obj INDEX s INVERT object ip obj INDEX a TYPE START_IP END...

Page 842: ...t ip obj 1 a 1 192 168 1 45 object ip obj 1 v IP Object Profile 1 Name marketing Interface Any Address type single Start ip address 192 168 1 45 End Mask ip address 0 0 0 0 Invert Selection 0 T Te el...

Page 843: ...IP object profiles for the group profile Example object ip grp 3 a 1 2 3 4 5 The IP object profiles with index number 1 2 3 4 and 5 will be group under such profile E Ex xa am mp pl le e object ip gr...

Page 844: ...ype a name with less than 15 characters Example object ip obj 9 n bruce i INTERFACE It means to define an interface for the IP object INTERFACE 0 means any INTERFACE 1 means LAN INTERFACE 3 means WAN...

Page 845: ...all profiles INDEX It means the index number of the specified group profile v It means to view the information of the specified group profile Example object ip grp 1 v n NAME It means to define a nam...

Page 846: ...t ti io on n Parameter Description setdefault It means to return to default settings for all profiles INDEX It means the index number of the specified service object profile v It means to view the inf...

Page 847: ...D_P type a port number to indicate destination port Example object service obj 3 d 1 100 200 E Ex xa am mp pl le e object service obj 1 n limit object service obj 1 p 255 object service obj 1 s 1 120...

Page 848: ...object index 0 0 1 0 2 0 3 0 4 0 5 0 6 0 7 0 object service grp 1 a 1 2 Service Group Profile 1 Name Grope_1 Included service object index 0 1 1 2 2 0 3 0 4 0 5 0 6 0 7 0 T Te el ln ne et t C Co om mm...

Page 849: ...ln ne et t C Co om mm ma an nd d o ob bj je ec ct t f fe e This command is used to create File Extension Object profile S Sy yn nt ta ax x object fe show object fe setdefault object fe obj INDEX v obj...

Page 850: ...lb ole tlb viv vrm ace arj bzip2 bz2 cab gz gzip rar sit zip bas bat com exe inf pif reg scr Example object fe obj 1 e bmp E Ex xa am mp pl le e object fe obj 1 n music object fe obj 1 e Audio object...

Page 851: ...ns the number of LAN port and WAN port AN 10H It means the physical type for the specific port AN auto negotiate 100F 100M Full Duplex 100H 100M Half Duplex 10F 10M Full Duplex 10H 10M Half Duplex sta...

Page 852: ...all settings E Ex xa am mp pl le e portmaptime t 86400 u 300 i 10 portmaptime l Current setting TCP Timeout 86400 sec UDP Timeout 300 sec IGMP Timeout 10 sec TCP WWW Timeout 60 sec TCP SYN Timeout 60...

Page 853: ...m 1 p 1 b 0 Set ok The PPA mode is Auto You need to set the Manual mode first TWO way accleration is disable ppa v PPA mode is Auto PPA Protocol TCP 1 UDP 0 PPA two way disable PPA time is 10 PPA rang...

Page 854: ...in apply to incoming traffic only 2 out apply to outgoing traffic only 3 both apply to both incoming and outgoing traffic Default is enable for outgoing traffic i bandwidth It means to set inbound ban...

Page 855: ...and 3 The default setting is class 1 n name It means to type a name for the class a It means to add rule for specified class e no It means to edit specified rule no type the index number for the rule...

Page 856: ...p pl le e qos class c 2 n draytek a m 1 l 192 168 1 50 192 168 1 80 Following setting will set in the class2 class 2 name set to draytek Add a rule in class2 Class2 the 1 rule enabled Set local addres...

Page 857: ...displays current status of LAN IP address settings E Ex xa am mp pl le e show lan The LAN settings ip mask dhcp star_ip pool gateway V LAN1 192 168 1 1 255 255 255 0 V 192 168 1 10 200 192 168 1 1 X L...

Page 858: ...ary DNS Not set Secondary DNS Not set T Te el ln ne et t C Co om mm ma an nd d s sh ho ow w o op pe en np po or rt t This command displays current status of open port setting E Ex xa am mp pl le e sho...

Page 859: ...me e This command displays the reuse time of NAT session Level0 It is the default setting Level1 It will be applied when the NAT sessions are smaller than 25 of the default setting Level2 It will be a...

Page 860: ...ING TX Block 0 RX Block 0 Corrected Blocks 0 Uncorrected Blocks 0 UP Speed 0 Down Speed 0 SNR Margin 0 Loop Att 0 T Te el ln ne et t C Co om mm ma an nd d s sh ho ow w a ad ds sl l This command displa...

Page 861: ...n nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description reset It means to reset the transmitted received bytes to Zero interface It means to specify WAN1 WAN5 including multi PVC interfac...

Page 862: ...X XX XX XX all ALL S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description start It means the starting point of the IP address pool for the DHCP server IP address It means to specif...

Page 863: ...le e srv dhcp dns1 168 95 1 1 srv dhcp dns1 DNS IP address Now 168 95 1 1 IP Routed Subnet dns same as NAT Subnet dns T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p d dn ns s2 2 This...

Page 864: ...dhcp frcdnsmanl on Domain name server now is using manual settings srv dhcp frcdnsmanl off Domain name server now is using auto settings T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp...

Page 865: ...ys reboot command to reboot router T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p o on n This function allows users to turn on DHCP server It needs rebooting router please type sys re...

Page 866: ...server as the starting point E Ex xa am mp pl le e srv dhcp startip 192 168 1 53 This setting will take effect after rebooting Please use sys reboot command to reboot the router T Te el ln ne et t C C...

Page 867: ...ns the lease time that DHCP server can use The unit is second E Ex xa am mp pl le e srv dhcp leasetime srv dhcp leasetime Lease Time sec Now 86400 T Te el ln ne et t C Co om mm ma an nd d s sr rv v d...

Page 868: ...hcp primWINS 192 168 1 88 srv dhcp primWINS srv dhcp primWINS WINS IP address srv dhcp primWINS clear Now 192 168 1 88 T Te el ln ne et t C Co om mm ma an nd d s sr rv v d dh hc cp p s se ec cW WI IN...

Page 869: ...p t tf ft tp p This command can set the TFTP server as the DHCP server S Sy yn nt ta ax x srv dhcp tftp TFTP server name S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description TFTP...

Page 870: ...t means to set option number Available number ranges from 0 to 255 v It means to set option number by typing string a It means to set the option value by specifying the IP address x It means to set op...

Page 871: ...eral commands in one line e It means to enable disable such feature 1 enable 0 disable i It means to specify the private IP address of the DMZ host r It means to remove DMZ host setting v It means to...

Page 872: ...disable the open port rule profile 0 disable 1 enable c comment It means to type the description less than 23 characters for the defined network service i local ip It means to set the IP address for...

Page 873: ...De es sc cr ri ip pt ti io on n Parameter Description Add idx It means to add a new port redirection table with an index number Available index number is from 1 to 10 serv name It means to type one n...

Page 874: ...4 0 0 0 2 5 0 0 0 2 6 0 0 0 2 7 0 0 0 2 8 0 0 0 2 9 0 0 0 2 10 0 0 0 2 11 0 0 0 2 12 0 0 0 2 13 0 0 0 2 14 0 0 0 2 15 0 0 0 2 16 0 0 0 2 17 0 0 0 2 18 0 0 0 2 19 0 0 0 2 20 0 0 0 2 Protocol 0 Disable...

Page 875: ...rection setting open port and DMZ settings E Ex xa am mp pl le e srv nat showall Index Proto WAN IP Port Private IP Port Act R01 TCP 0 0 0 0 80 192 168 1 11 100 Y O01 TCP 0 0 0 0 23 83 192 168 1 100 2...

Page 876: ...w wi it tc ch h o of ff f This command is used to turn off the auto discovery for external devices E Ex xa am mp pl le e switch off Disable External Device auto discovery T Te el ln ne et t C Co om mm...

Page 877: ...er account and specify LDAP server The server will authenticate the local user who wants to access into the web user interface of Vigor router S Sy yn nt ta ax x sys adminuser option sys adminuser edi...

Page 878: ...Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description e enable It is used to disable enable bonjour service 0 disable 1 enable h enable It is used to disable enable http web servic...

Page 879: ...s Profile version 3 0 0 Status 1 0x491e5e6c sys cfg default T Te el ln ne et t C Co om mm ma an nd d s sy ys s c cm md dl lo og g This command displays the history of the commands that you have typed...

Page 880: ...e sys domainname wan1 clever sys domainname wan2 intellegent sys domainname sys domainname wan1 wan2 Domain Name Suffix max 40 characters sys domainname wan1 wan2 clear Now wan1 clever wan2 intellige...

Page 881: ...This command can set and remove the name for the router when DHCP mode is selected for WAN S Sy yn nt ta ax x sys name wan1 ASCII string sys name wan1 clear S Sy yn nt ta ax x D De es sc cr ri ip pt...

Page 882: ...ot t This command allows users to restart the router automatically within a certain time S Sy yn nt ta ax x sys autoreboot on off hour s S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter...

Page 883: ...ys version Router Model Vigor2862Vn Version 3 7 4 1 English Profile version 3 0 0 Status 1 0x49165e6c Router IP 192 168 1 1 Netmask 255 255 255 0 Firmware Build Date Time Mar 20 2014 14 09 50 Router N...

Page 884: ...ri ip pt ti io on n Parameter Description on It means to turn on pulling buffer off It means to turn off pulling buffer E Ex xa am mp pl le e sys pollbuf on Buffer polling is on sys pollbuf off Buffe...

Page 885: ...m It means to get parameter notification value setnoti parm value It means to set parameter notification value log It means to display the TR 069 log debug on off on turn on the function of sending de...

Page 886: ...andwidth InternetGatewayDevice X_00507F_Applications InternetGatewayDevice X_00507F_VPN InternetGatewayDevice X_00507F_VoIP InternetGatewayDevice X_00507F_WirelessLAN InternetGatewayDevice X_00507F_Sy...

Page 887: ...nse message licauth It means the license authentication time setting regser It means the license register server setting licera It means to erase license setting licifno It means license and signature...

Page 888: ...e Default setting is on for DSL voip_feature on off vf_name It means VoIP feature Type on to enable the feature or type off to disable the feature vf_name available settings include DRVTAPI DRVVMMC DR...

Page 889: ...t tm ma ai il l This command is used to display current settings for sending test mail E Ex xa am mp pl le e testmail Send out test mail Mail Alert Disable SMTP_Server 0 0 0 0 Mail to Return Path T Te...

Page 890: ...service must be enabled first E Ex xa am mp pl le e upnp on UPNP start upnp service SERVICE TABLE1 serviceType urn schemas microsoft com service OSInfo 1 serviceId urn microsoft com serviceId OSInfo1...

Page 891: ...on1 sid d9cd47a5 d9c9 4d3d 8043 d03a82f27983 eventKey 1 ToSendEventKey 1 T Te el ln ne et t C Co om mm ma an nd d u up pn np p t tm mp pv vs s This command can display current status of temp Virtual S...

Page 892: ...d name and model name of the USB modems which are supported by Vigor router E Ex xa am mp pl le e usb list Brand Module Standard Aiko Aiko 83D 3 5G Y BandRich Bandluxe C170 3 5G Y BandRich Bandluxe C2...

Page 893: ...able Vigor Bridge Function T Te el ln ne et t C Co om mm ma an nd d v vi ig gb br rg g o of ff f This command can disable vigor bridge function E Ex xa am mp pl le e vigbrg off Disable Vigor Bridge Fu...

Page 894: ...g w wa an n1 1o on n This command is used to enable the bridge WAN1 management E Ex xa am mp pl le e vigbrg wan1on Enable Vigor Bridge Wan1 management T Te el ln ne et t C Co om mm ma an nd d v vi ig...

Page 895: ...dge to LAN 1 mode OFF WAN 2 full bridge to LAN 5 mode ON WAN 5 full bridge to LAN 1 mode OFF WAN 6 full bridge to LAN 1 mode OFF WAN 7 full bridge to LAN 1 mode OFF WAN 8 full bridge to LAN 1 mode OFF...

Page 896: ...al 1 0 S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description voip dialplan block n It means the index number of the VoIP settings n 1 20 command parameter The available commands w...

Page 897: ...umber Hotkey to enable call forwarding all function f number Hotkey to enable call forwarding busy function C number Hotkey to enable call forwarding no answer function c number Hotkey to disable call...

Page 898: ...y to Disable DND Function 79 Hotkey to Enable Block Anonymous Calls Function 77 Hotkey to Disable Block Anonymous Calls Function 87 Hotkey to Enable Block Unknow Domain Calls Function 40 Hotkey to Dis...

Page 899: ...ended for you to use the default setting Channel Available channel number 1 2 AbsoluteValue AbsoluteValue In 1 dB increments with 1 corresponding to 6 dBm Range 1 to 30 voip dsp EchoCanceler type This...

Page 900: ...rresponding to 500ms That is to say Value 6 is corresponding 3000ms i e 3 seconds Timer 1 20 Vigor voip dsp timer 20 Set the timer 20 Voip dsp debugMsg Avaible settings include clrev clear phone hook...

Page 901: ...for a country patten_num 1 Australia Ring Pattern cadenceOneOn 400 cadenceOneOff 200 cadenceTwoOn 400 cadenceTwoOff 2000 patten_num 2 Denmark Ring Pattern cadenceOneOn 1000 cadenceOneOff 4000 voip ds...

Page 902: ...ct caller ID type It is available only for the model with FXO port voip dsp cidplusdigit 1 0 channel value Set the substitution 0 9 for digit in caller ID 1 enable the substitution 0 disable the subst...

Page 903: ...dsp setCidDetGain tx 1 Current CID Detect Tx Gain 1 Rx Gain 6 voip dsp setCidDetGain rx 3 Current CID Detect Tx Gain 1 Rx Gain 3 T Te el ln ne et t C Co om mm ma an nd d v vo oi ip p r rt tp p S Sy yn...

Page 904: ...es the start end port for RTP stream value The default value is 10050 15000 voip rtp symmetric value Make the data transmission going through on both ends of local router and remote router not mislead...

Page 905: ...The default value is 5060 d domain Set the domain name or IP address of the SIP Registrar server The maximum is 63 characters y proxy Set domain name or IP address of SIP proxy server The maximum is...

Page 906: ...is used such function will be disabled k num1 num2 Set backup wan list first wan second wan range 1 to 4 v View current status for account settings Voip sip calllog Display current status for SIP cal...

Page 907: ...able 1 enable v View current settings voip sip misc Allows users to set miscellaneous settings for the device c enable Enable compact header to shorten the packet 0 disable 1 enable s enable Change in...

Page 908: ...users to set NAT Traversal Setting s server Set the IP address for STUN server t sec Set ping interval for SIP account Sec 6 600 i ip Indicate external IP address v View current settings for SIP NAT E...

Page 909: ...p 0 SAS voice prompt is disabled T Te el ln ne et t C Co om mm ma an nd d v vp pn n l l2 2l ls se et t This command allows users to set advanced parameters for LAN to LAN function S Sy yn nt ta ax x...

Page 910: ...ns se et t This command allows users to configure setting for remote dial in VPN profile S Sy yn nt ta ax x vpn dinset list index vpn dinset list index on off vpn dinset list index motp on off vpn din...

Page 911: ...1234 Secret e759bb6f0e94c7ab4fe6 Idle Timeout 300 sec T Te el ln ne et t C Co om mm ma an nd d v vp pn n s su ub bn ne et t This command allows users to specify a subnet selection for the specified re...

Page 912: ...s the IP address to dial to usr pwd It means the user and the password required for the PPTP connection nip nmask It means the remote network IP and the mask e g vpn setup 1 name1 pptp_out 1 2 3 4 vig...

Page 913: ...ange Log Profile Index 1 Profile Name name1 Username vigor Password 1234 Pre share Key abc Call Direction Dial In Type of Server ISDN PPTP IPSec L2TP Dial from 1 2 3 4 Remote NEtwork IP 192 168 1 0 Re...

Page 914: ...e the function and PING IP 1 2 3 4 to keep alive For Dial Out Settings ctype It means Type of Server I am calling ctype t means PPTP ctype s means IPSec ctype l means L2TP IPSec Policy None ctype l1 m...

Page 915: ...address of 203 12 23 48 Type off means any remote IP is allowed to dial in peerid It means the peer ID for Remote VPN Gateway Type draytek means the word is used as local ID iname It means Dial in Us...

Page 916: ...m mr ro ou ut te e This command allows users to list add or delete static routes for a certain LAN to LAN VPN profile S Sy yn nt ta ax x vpn mroute index list vpn mroute index add network ip mask vpn...

Page 917: ...s to list Network Settings of the specified profile index It means the index number of the profile Available index numbers 1 32 E Ex xa am mp pl le e vpn list 32 all Common Settings Profile Name Profi...

Page 918: ...types to be selected on off on enable VPN remote setting off disable VPN remote setting E Ex xa am mp pl le e vpn remote PPTP on Set PPTP VPN Service On Please restart the router T Te el ln ne et t C...

Page 919: ...ansmission of Netbios Naming Packet inside the tunnel E Ex xa am mp pl le e vpn NetBios set H2l 1 Pass Remote Dial In Profile Index 1 NetBios Block Pass PASS T Te el ln ne et t C Co om mm ma an nd d v...

Page 920: ...tus and Leakage List of free L Buffer 95 minimum 94 leak 1 of free M Buffer 529 minimum 529 leak 3 of free S Buffer 1199 minimum 1198 leak 1 of free Msgid Buffer 1024 minimum 1024 T Te el ln ne et t C...

Page 921: ...d subnet is allowed to pass VPN tunnel T Te el ln ne et t C Co om mm ma an nd d v vp pn n p pa as ss s2 2n na at t This command allows users to determine if the packets passing through by NAT or not w...

Page 922: ...rs to adjust the size of MTU for WAN1 WAN2 S Sy yn nt ta ax x wan mtu value wan mtu2 value S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description value It means the number of MTU f...

Page 923: ...ction E Ex xa am mp pl le e wan enable WAN WAN1 enabled T Te el ln ne et t C Co om mm ma an nd d w wa an n f fo or rw wa ar rd d This command allows you to enable or disable the function of WAN forwar...

Page 924: ...em m w wa an n m mo od de em m2 2 This command wan modem allows you to configure 3G 4G USB Modem PPP mode of WAN3 The command wan modem2 allows you to configure 3G 4G USB Modem PPP mode of WAN4 S Sy...

Page 925: ...0x0 0x0 and the router specifies WAN interface by USB port status Display current status of USB modem E Ex xa am mp pl le e wan modem pin 0000 wan modem status Modem Link Speed 0 Current Signal Streng...

Page 926: ...tting S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description auth 0 1 Set PPP authentication of LTE WAN 0 None 1 PAP or CHAP band Display working band information for LTE network c...

Page 927: ...c 0 1 Set whether to reply with MAC address 0 no 1 yes e 0 1 Enable or disable Reboot on SMS Message function 0 disable 1 enable f 0 1 Set whether to reply with WAN1 IP address 0 no 1 yes g 0 1 Set w...

Page 928: ...d de et te ec ct t This command allows you to configure WAN connection detection When Ping Detection is enabled for Static IP or DHCP or PPPoE mode Router pings specified IP addresses to detect the WA...

Page 929: ...interval Set the interval between each ping operation Available setting is between 1 and 3600 The unit is second interval Type a value retry retry Set how many ping operations are retried before the R...

Page 930: ...vl la an n This command allows you to configure multi VLAN for WAN and LAN It supports pure bridge mode modem mode between Ethernet WAN and LAN port 2 4 S Sy yn nt ta ax x wan mvlan pvc_no status save...

Page 931: ...5 p6 Service Type Tag Priority Keep Tag 7 ON 0 0 1 1 0 0 Normal 0 OFF 0 OFF T Te el ln ne et t C Co om mm ma an nd d w wa an n m mu ul lt ti if fn no o This command allows you to specify a channel in...

Page 932: ...on of tagging on WAN interface stat Display current VLAN status E Ex xa am mp pl le e wan vlan stat Interface Pri Tag Enabled WAN1 ADSL 0 0 WAN1 VDSL 0 0 WAN2 0 0 T Te el ln ne et t C Co om mm ma an n...

Page 933: ...e executed Different numbers represent different actions 1 shotdown wan 2 send mail alert 4 send sms alert For example if you type 5 5 1 4 the system will send SMS alert when WAN shotdown is detected...

Page 934: ...ect It must be an IPv6 IP address IPv6 address Type the IPv6 address of the target s base_size Specify the size of MTU base_size Available setting is 1000 1500 E Ex xa am mp pl le e wan detect_mtu6 w...

Page 935: ...For example to configure google APP key you can type hsportal p 1 g i this_is_app_key Profile 1 set google login disabled OK r Configure landing page mode 0 fixed URL 1 user request 2 bulletin E g hsp...

Page 936: ...2 ssid3 ssid4 isolate It means to associate a MAC address to certain SSID interfaces access control settings The isolate setting will limit the wireless client s network capabilities to accessing the...

Page 937: ...eans to display what the current wireless mode is channel number It means the channel of frequency of the wireless LAN The available settings are 0 1 2 3 4 5 6 7 8 9 10 11 12 and 13 number 0 means Aut...

Page 938: ...ID4 enable It means to enable the function of the rate control for the specified SSID 0 disable and 1 enable upload It means to configure the rate control for data upload The unit is kbps download It...

Page 939: ...means to enhance the performance in data transmission about 40 more by enabling Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the sa...

Page 940: ...et time 5 del Remove white list block list e g wl scan del wlist 001122aabbcc filter Set which filter you want ssid scanning the AP based on SSID setting channel scanning the AP based on channel setti...

Page 941: ...11 22 aa bb cc 0d 0 58 26 0d 0 0 T Te el ln ne et t C Co om mm ma an nd d w wl l i is so o_ _v vp pn n This command allows users to activate the function of VPN isolation S Sy yn nt ta ax x wl iso_vp...

Page 942: ...ess point bss It means to set WMM for wireless clients ack It means to map to the Ack policy settings of AP WMM enable It means to enable the WMM for each SSID 0 disable 1 enable Apsd value It means t...

Page 943: ...op 0 APACM 0 QueIdx 1 APAifsn 7 APCwmin 4 APCwmax 10 APTxop 0 APACM 0 QueIdx 2 APAifsn 1 APCwmin 3 APCwmax 4 APTxop 94 APACM 0 QueIdx 3 APAifsn 1 APCwmin 2 APCwmax 3 APTxop 47 APACM 0 QueIdx 0 BSSAifs...

Page 944: ...for GI_800 and 1 for GI_4001 wl ht badecline value The value you can type is 0 for disabling and 1 for enabling wl ht autoba value The value you can type is 0 for disabling and 1 for enabling wl ht rd...

Page 945: ...tings are d Disable b Bridge r Repeapter security value It means to configure security mode with encrypted keys for WDS mode Available settings are disable No security wep WEP wpapsk key WPA PSK wpa2p...

Page 946: ...pcli security mode wl apcli ssid ssid_name wl apcli bssid mac address S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description show Display current status of wireless AP client enabl...

Page 947: ...r disable wireless button control S Sy yn nt ta ax x wl btnctl value S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description value 0 disable 1 enable E Ex xa am mp pl le e wl btnctl...

Page 948: ...802 1X type is Local 802 1X T Te el ln ne et t C Co om mm ma an nd d w wl l b bn nd ds st tr rg g This command allows users to configure settings for Band Steering 2 4GHz S Sy yn nt ta ax x wl bndstrg...

Page 949: ...active station number achieves this number the airtime fairness function will be applied Available values will be 2 to 64 show Display current status enable or disable and triggering client number fo...

Page 950: ...i io on n Parameter Description enable ssid1 ssid2 ssid3 ssid4 It means to enable the settings for SSID1 SSID2 SSID3 and SSID4 disable ssid1 ssid2 ssid3 ssid4 It means to disable the settings for SSID...

Page 951: ...s Isolate the station from LAN T Te el ln ne et t C Co om mm ma an nd d w wl l_ _d du ua al l a ap ps sc ca an n This command is used to scan Access Point installed near the location of Vigor router...

Page 952: ...nfig ratectl show wl_dual config isolate lan ssid_num enable wl_dual config isolate member ssid_num enable wl_dual config isolate vpn ssid_num enable wl_dual config isolate show S Sy yn nt ta ax x D D...

Page 953: ...download The unit is kbps example wl dual config ratectl 1 1 25 25 ratectl show It means to display the data transmission rate upload and download for SSID1 SSID2 SSID3 and SSID4 isolate lan ssid_num...

Page 954: ...t ta ax x wl_dual security SSID_NUMBER mode key index wl_dual security show S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description Security SSID_NUMBER mode key index SSID_NUMBER T...

Page 955: ...accessing Internet via Vigor router S Sy yn nt ta ax x wl dual stalist E Ex xa am mp pl le e wl_dual stalist 5G Wireless Station List Index Status IP Address MAC Address Associated with Status Codes...

Page 956: ...ring or 64 Hexadecimal digit format e g wl_dual wds security disable wl_dual wds security wep 12345 wl_dual wds security wpa2psk 12345678 ap value It means to enable or disable the AP function Value 1...

Page 957: ...rameters T Te el ln ne et t C Co om mm ma an nd d w wl l_ _d du ua al l w wp ps s This command allows users to configure WPS for wireless connection 5GHz S Sy yn nt ta ax x wl_dual wps enable value wl...

Page 958: ...1x E Ex xa am mp pl le e wl_dual set8021x t 1 Note Please restart 5G wireless after you set the parameters wl_dual set8021x v 802 1X type is Local 802 1X T Te el ln ne et t C Co om mm ma an nd d w wl...

Page 959: ...r wl_dual apcli show Wireless 5G AP Clinet is enabled Current SSID is Security Mode disable Wireless 5G client is disconnected data rate mode signal 0 wl_dual apcli ssid carrie Note Please restart wir...

Page 960: ...rs restart wl_dual drayrs show S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description set mode rs_low rs_low_security delta Select a mode for roaming 0 disable 1 Strictly Minimum R...

Page 961: ...follows i address client IPv4 address domain m mask client IPv4 mask p prefix client IPv6 prefix l length client IPv6 prefix length s secret shared secret ex radius client add 1 i 192 168 1 1 m 255 25...

Page 962: ...is 1 set_localdot1x_phase2 Only support MS CHAPv2 now The method_idx for such phase2 is 1 options e method_idx set method e g local_8021x set_localdot1x_phase1 e 1 d delete mehod e g local_8021x set_...

Page 963: ...eans any source IP address can pass through NAT and wake up the LAN client This command will allow the user to choose whether WoL packets can be passed from the Internet to the LAN network from a spec...

Page 964: ...pass l all l userl l ip Show online user all all of the users will be displayed on the screen user name type the user name that you want to view on the screen ip type the IP address that you want to...

Page 965: ...g q 200 r It means to set data quota e g r 1000 w It means to specify the data quota unit MB GB e g w MB s It means to set schedule index Available settings are sch_idx1 sch_idx2 sch_idx3 and sch_idx4...

Page 966: ...traceable v to display all of the traceable APS with speficed index number Use appqos untraceable v to display all of the untraceable APS with speficed index number e It menas to enable QoS for applic...

Page 967: ...VigorAP registered to Vigor2862 S Sy yn nt ta ax x apm show apm clear apm discover apm query S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter Description show It displays current inform...

Page 968: ...index number in this field It is the original APM profile to be cloned to other APM profile to index Type an index number in this file It is the target profile which will clone the parameters settings...

Page 969: ...o set the load balance configuration file for APM Show It shows the configuration value value You need to type 10 numbers in this field Each number represents different setting value 1 The first numbe...

Page 970: ...6 Download limit 0 7 Enable disassociation by idle time 0 8 Enable disassociation by Signal strength 0 9 Traffic limit unit upload 0 10 Traffic limit unit download 0 flag 0 apm lbcfg set 1 1 0 15 0 0...

Page 971: ...a ap ps sy ys sl lo og g This command is used to display the AP syslog data coming form VigorAP S Sy yn nt ta ax x apm apsyslog AP_Index S Sy yn nt ta ax x D De es sc cr ri ip pt ti io on n Parameter...

Page 972: ...De es sc cr ri ip pt ti io on n Parameter Description AP_Index Specify the index number which represents VigorAP E Ex xa am mp pl le e apm stanum Show the APM AP Station Number data apm stanum AP_Inde...

Page 973: ...g Sync Interval for HA Minimum interval is 15 minutes M Minute Setting range is 0 15 30 45 e g ha set I M 30 H Hour Setting range is from 0 to 23 e g ha set I H 12 D Day Setting range is from 0 to 30...

Page 974: ...irtual IPv6 LAN1 On FE80 200 5EFF FE00 101 LAN2 On FE80 200 5EFF FE00 101 LAN3 On FE80 200 5EFF FE00 101 LAN4 On FE80 200 5EFF FE00 101 LAN5 On FE80 200 5EFF FE00 101 LAN6 On FE80 200 5EFF FE00 101 DM...

Page 975: ...x D De es sc cr ri ip pt ti io on n Parameter Description LAN_port Specify the LAN port number 1 to 6 E Ex xa am mp pl le e swm show If you connected a VigorSwitch but does not display here Please che...

Page 976: ...swm post 1 Start post cfg to LAN 1 external switch with currect settings Please wait a few seconds Result OK T Te el ln ne et t C Co om mm ma an nd d s sw wm m a au ut th h This command is used to dis...

Page 977: ...ical connect port as trunk port and let it join each VLAN group Before using such command please use swm show to check valid VLAN index firstly T Te el ln ne et t C Co om mm ma an nd d b ba ac ck ku u...

Page 978: ...47 263 ADSL VDSL2 68 Advance Mode 432 Advanced Mode 279 Advanced Setting 307 Aggregation MSDU 307 AH 411 Airtime Fairness 312 ake on LAN 214 Always On 70 73 96 100 110 111 112 114 115 117 119 123 Anal...

Page 979: ...e 83 91 97 114 116 Bridge Subnet 91 97 114 116 Brute Force Protection 501 Cache 462 Call Barring 338 Call Direction 339 378 Call Filter 424 Call Forward 340 Call Forwarding 332 Call Transfer 343 Call...

Page 980: ...Details Static IP or Dynamic IP 94 Details Static or Dynamic IP 100 Determine Real WAN IP 192 DFS Restrictions 290 DHCP 47 53 DHCP Client Identifier 81 89 DHCP Server Configuration 149 152 154 DHCP Se...

Page 981: ...100 149 152 General Setup 67 Google Map 596 GRE 383 Green Field 307 Group ID 213 222 Guard Interval 307 GUI Map 28 Hardware Acceleration 171 Hardware Installation 11 Hide caller ID 341 Hide SSID 296...

Page 982: ...N Routed Prefix 117 LAN to LAN 376 Landing Page 539 543 LAN General Setup 146 Last Call Return 340 LDAP Active Directory 413 LDAP Active Directory Setup 187 Lease Time 149 152 154 Line Speed 68 69 71...

Page 983: ...sal 211 327 331 Neighbor AP Detection 624 Netbios Naming Packet 409 Network Configuration 148 152 154 Network Interface 252 Network Mode 105 107 Notification Object 676 NS Detect 114 Objects Settings...

Page 984: ...ter Server 687 Priority 35 70 72 162 247 258 Priority ID 222 Private IP 177 Private IP Address 65 Private Port 177 Production Registration 60 Protocol 84 222 Protocol Processing Engine PPE 171 Provide...

Page 985: ...icate 508 Send SMS 281 Sensor 691 Server Address 98 Server Response 192 Service 185 Service Activation Wizard 58 Service API 191 Service Name 37 92 103 177 Service Provider 191 193 672 Service Type 19...

Page 986: ...r Profile 225 Syslog Alarm 692 Syslog Explorer 715 Syslog Mail Alert 495 System Maintenance 478 System time set 200 T 38 Fax 343 TACACS 413 Tag value 35 70 72 Tagged VLAN 161 TCP Temperature Sensor 62...

Page 987: ...tector 333 VoIP 321 VoIP Wizard 324 Volume Gain 345 VPI 88 VPN 349 588 VPN and Remote Access 350 VPN Backup 387 VPN Client Wizard 351 VPN Dial Out Through 355 VPN Graph 713 VPN Load Balance 387 VPN Ma...

Page 988: ...ies User s Guide 972 Wildcard 192 Wired 802 1x 170 Wireless 2 4 5G 71 Wireless LAN 287 Wireless Wizard 291 Wizard Mode 432 WLAN Isolation 289 WLAN Profile 612 WMM Capable 308 WPA 289 298 WPS 290 301 Z...

Reviews:

No comments

Related manuals for Vigor2862 Series

Brand: Watchguard Pages: 20

Brand: Fortinet Pages: 54

Brand: Elastix Pages: 42

Brand: Cisco Pages: 1354

Brand: Cisco Pages: 1224

Brand: Juniper Pages: 26

Brand: tufin Pages: 22

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands