Vigor1000 Series High Speed Gigabit Fiber Router User’s Guide Version: 1.0 Firmware Version: V1.5.
Copyright Information Copyright Declarations Copyright 2012 All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders. Trademarks The following trademarks are used in this document: z Microsoft is a registered trademark of Microsoft Corp.
European Community Declarations Manufacturer: Address: Product: DrayTek Corp. No. 26, Fu Shing Road, HuKou County, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Vigor1000 Series Router DrayTek Corp. declares that Vigor1000 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC.
Table of Contents Preface.........................................................................................................1 1.1 Features .................................................................................................................................. 1 1.2 Web Configuration Buttons Explanation ................................................................................. 1 1.3 LED Indicators and Connectors .........................................................................
Web Configuration ....................................................................................59 4.1 WAN ...................................................................................................................................... 59 4.1.1 Internet Access ............................................................................................................... 61 4.1.2 Multi-VLAN............................................................................................................
4.8.5 LAN to LAN................................................................................................................... 155 4.9 Certificate Management ...................................................................................................... 160 4.9.1 Trusted CA Certificate .................................................................................................. 161 4.9.2 Local Certificate ......................................................................................
4.16.3 Routing Table ............................................................................................................. 247 4.16.4 System Log................................................................................................................. 248 4.16.5 Traffic Overview.......................................................................................................... 249 4.16.6 Detailed Statistics .................................................................................
Preface The Vigor1000 series are the routers with high speed in data transmission through WAN port and LAN ports. With hardware NAT acceleration, the rate of Vigor1000 series can be ideal for multi-media application. With the development of NGN (Next Generation Network), you may recently hear the news about FTTx deployment in your local area or even have already subscribed the unbundling last mile service (e.g. VDSL2) from local ITSP for FTTx.
Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed explanation. 1.3 LED Indicators and Connectors Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. 1.3.1 For Vigor1000 LED Status Explanation ACT (Activity) Blinking Off On Off The router is powered on and running normally. The router is powered off. Hardware NAT is enabled. Hardware NAT is disabled.
1.3.2 For Vigor1000n LED Status Explanation ACT (Activity) Blinking Off On Off The router is powered on and running normally. The router is powered off. Hardware NAT is enabled. Hardware NAT is disabled. On Blinking On Off Blinking On On On The WAN port is connected. It will blink while transmitting data. The port is connected. The port is disconnected. The data is transmitting. A USB device is connected and active. The VPN tunnel is active. The QoS function is active.
1.3.3 For Vigor1000Vn LED Status Explanation ACT (Activity) Blinking The router is powered on and running normally. The router is powered off. Hardware NAT is enabled. Hardware NAT is disabled. HPA (Hardware Packet Accelerate) WAN LAN1/2/3/4 USB1/2 Phone1/ Phone2 Off On Off On Blinking On Off Blinking On Blinking On Off WLAN/ WPS Blinking On (Green) Blinking (Green) Blinking (Orange) Off The WAN port is connected. It will blink while transmitting data. The port is connected.
1.4 Hardware Installation Before starting to configure the router, you have to connect your devices correctly. 1. Connect the fiber-optic cable to this device. 2. Connect one port of 4-port switch to your computer with a RJ-45 cable. This device allows you to connect 4 PCs directly. 3. Connect one end of the power cord to the power port of this device. Connect the other end to the wall outlet of electricity. 4. Power on the router. 5. Check the ACT and WAN, LAN LEDs to assure network connections.
1.5 Printer Installation You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.draytek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients). 1. Connect the printer with the router through USB/parallel port. 2. Open Start->Settings-> Printer and Faxes. 3.
4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next.
6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish.
9. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. 10. For the final stage, you need to go back to Control Panel-> Printers and edit the property of the new printer you have added. 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name.
Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ; find out the link of Printer Server and click it. Then, click the What types of printers are compatible with Vigor router? link. Note 2: Vigor router supports printing request from computers via LAN ports but not WAN port.
Basic Settings For using the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password for accessing into the web configurator of Vigor router and how to adjust settings for accessing Internet successfully. 2.1 Accessing Web Page 1. Make sure your PC connects to the router correctly.
2.2 Changing Password Please change the password for the original security of the router. 1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. 2. Please type “admin/admin” as Username/Password for accessing into the web configurator with admin mode. 3. Now, the Main Screen will appear. Note: The home page will change slightly in accordance with the type of the router you have. 4.
6. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. 2.3 Quick Start Wizard Notice: Quick Start Wizard for user mode operation is the same as for admin mode operation. If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is welcome page, please click Next.
2.3.1 Setting up the Password The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next. 2.3.2 Setting up the Time Zone On the next page as shown below, please select the Time Zone for the router installed and specify the NTP server(s). Then click Next for next step.
2.3.3 Setting up the Internet Connection On the next page as shown below, please select the appropriate connection type according to the information from your ISP. There are five types offered in this page. Each connection type will bring out different web page. Static IP You will receive a fixed public IP address or a public subnet, namely multiple public IP addresses from your DSL or Cable ISP service providers.
Available settings are explained as follows: Item Description IP Address Type the IP address. Subnet Mask Type the subnet mask. Gateway Type the gateway IP address. Primary DNS Server Type in the primary IP address for the router. Secondary DNS Server Type in secondary IP address for necessity in the future. Enable The router will detect the MAC address automatically. Or, check the box to enable MAC address cloning. Clone MAC Address It is available when the box of Enable is checked.
Item Description of MAC Address. After finishing the settings here, please click Next. PPPoE PPPoE stands for Point-to-Point Protocol over Ethernet. It relies on two widely accepted standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a common broadband medium, such as a single DSL line, wireless device or cable modem. All the users over the Ethernet can share a common connection. PPPoE is used for most of DSL modem users.
Item Description Idle Time Out Set the timeout for breaking down the Internet after passing through the time without any action. MTU Size It means Max Transmit Unit for packet. The default setting will be specified by the system automatically. Therefore, keep this field in blank. Enable The router will detect the MAC address automatically. Or, check the box to enable MAC address cloning. Clone MAC Address It is available when the box of Enable is checked. Click Clone PC Address.
Item Description IP Address Type the IP address if you choose Static IP as the WAN IP network setting. Subnet Mask Type the subnet mask if you chose Static IP as the WAN IP. Redial Policy If you want to connect to Internet all the time, you can choose Always On. Otherwise, choose Connect on Demand. Idle Time Out Set the timeout for breaking down the Internet after passing through the time without any action. MTU Size It means Max Transmit Unit for packet.
Item Description harder for unauthorized clients or STAs to join your wireless LAN. SSID It means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "DrayTek". We suggest you to change it. Encryption Select an appropriate encryption mode to improve the security and privacy of your wireless data packets. Each encryption mode will bring out different web page and ask you to offer additional configuration.
WEP If you choose WEP as the security configuration, you have to specify encryption key (Key 1 ~ Key 4) and authentication mode (open or shared). All wireless devices must support the same WEP encryption bit size and have the same key. Four keys can be entered here, but only one key can be selected at a time. The keys can be entered in ASCII or Hexadecimal. Choose the key you wish to use by using the Default Key drop down list.
Available settings are explained as follows: Item Description Type The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Select WPA, WPA2 or Auto as WPA mode. WPA Algorithm Choose the WPA algorithm, TKIP, AES or Auto. WPA Pre-shared Key The keys can be entered in ASCII or Hexadecimal. Check the key you wish to use.
Available settings are explained as follows: Item Description Type The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Select WPA, WPA2 or Auto as WPA mode. WPA Algorithm Choose the WPA algorithm, TKIP, AES or Auto. Server IP Address Enter the IP address of RADIUS server. Destination Port The UDP port number that the RADIUS server is using.
Available settings are explained as follows: Item Description Configure via Push Button Click Start PBC to invoke Push-Button style WPS setup procedure. The router will wait for WPS requests from wireless clients about two minutes. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes.
2.3.5 Saving the Wizard Configuration Now you can see the following screen. It indicates that the setup is complete. Different types of connection modes will have different summary. Click Finish and then restart the router. 2.4 Online Status The online status shows the system status, WAN status, and other status related to this router within one page. If you select PPPoE as the protocol, you will find out a link of Dial PPPoE or Drop PPPoE in the Online Status web page.
Item Description LAN interface. RX Packets-Displays the total received packets at the LAN interface. TX Bytes-Displays the total transmitted bytes at the LAN interface. RX Bytes-Displays the total received packets at the LAN interface. IPv6 Address-Displays the IPv6 address of the LAN interface. WAN Status IP-Displays the IP address of the WAN interface. GW IP-Displays the IP address of the default gateway. Mode-Displays the type of WAN connection (e.g., PPPoE).
Tutorials and Applications 3.1 How to Configure Multi-VLAN in Vigor Router Vigor1000 supports the function of Multi-VLAN (firmware version: 1.4.0 and after). It can specify a VLAN ID for WAN port and offers more advanced environmental application for the users through the bridge technique in WAN port and LAN port. I. Way to Configure To enable such function, please do the following: 1. Open WAN>>802.1Q VLAN Tag Configuration. Check the box of Enable Multi-VLAN Setup. 2.
II. Example Chart of Structure z PC 1 connects to the first LAN port of Vigor1000 and accesses Internet with WAN VLAN. z PC 2 connects to the forth LAN port of Vigor1000 and accesses Internet with LAN VLAN. z FXS 1 Phone connects to the FXS 1 port of Vigor1000, registers, sends and receives phone call with VoIP WAN. Functions Configuration 1. Open WAN>>Internet. Set PPPoE as the Connection Type and fill in the Username and Password offered by your ISP.
2. Open WAN>>802.1Q VLAN Tag Configuration to configure Multi-VLAN. Refer to the following graphic. 3. Open WAN>>VoIP WAN to configure VoIP WAN Setting. Note: At present, only DHCP, PPPoE and Static connection types are available.
4. Open VoIP >>SIP Accounts. Specify the connection interface for VoIP in the field of Register via. 5. Connect your PC or network device to the forth LAN port and type the username and password for PPPoE connection mode.
3.2 LAN to LAN IPSec VPN between Vigor1000 and Vigor2820 using Main mode In this document we will introduce how to create a LAN to LAN IPSec VPN between Vigor1000 and a Vigor2820 using Main mode. We use the following scenario. Case 1: VPN direction from Vigor1000 to Vigor2820 VPN configuration on Vigor1000 1. Create a LAN-to-LAN profile. 2. Enable it and give it a name. In this example the profile name is “Demo”.
3. Enter Vigor2820’s WAN IP address in the Remote IP field. 4. Select Main Mode as IKE phase 1 mode. 5. Setup a pre-shared key, which must be the same as in Vigor2820. 6. Enter Vigor1000’s private network in the Local Network / Mask field. Enter Vigor2820’s private network in the Remote Network / Mask field. 7. Use default value “Automatic” for IKE phase 1 and phase 2 proposals. 8. Click OK. 9.
VPN configuration on Vigor2820 1. Create a LAN-to-LAN profile. 2. Enable it and give it a name. In this example the profile name is “test”. 3. Select Dial-in as Call Direction. 4. In Dial-Out Settings part, select IPSec Tunnel and press the Advanced button. 5. In Dial-In Settings part, please enable Specify Remote VPN Gateway and enter WAN IP address of Vigor1000 in the Peer VPN Server ID field.
6. Setup a pre-shared key, which must be the same as in Vigor1000. 7. Enter Vigor1000’s private network in the Remote Network IP / Mask field. 8. Click OK. Note: Vigor1000 supports the following proposals by default.
Case 2: VPN direction from Vigor2820 to Vigor1000 VPN configuration on Vigor1000 1. Create a LAN-to-LAN profile. 2. Enable it and give it a name. In this example the profile name is “Demo”. 3. Enter WAN IP address of Vigor2820 in the Remote IP field. 4. Select Main Mode as IKE phase 1 mode. 5. Setup a pre-shared key, which must be the same as in Vigor2820. 6. Enter Vigor1000’s private network in the Local Network / Mask field. 7.
VPN configuration on Vigor2820 1. Create a LAN-to-LAN profile. 2. Enable it and give it a name. In this example the profile name is “test”.
3. Select Dial-Out as Call Direction and enable Always on. 4. Select IPSec Tunnel and enter Vigor1000’s WAN IP address in the Server IP/Host Name for VPN field. 5. Setup a pre-shared key, which must be the same as in Vigor1000. 6. Select ESP (High) and 3DES with Authentication. 7. Enter Vigor1000’s private network in the Remote Network IP / Mask field. 8. Click OK.
3.3 LAN to LAN IPSec VPN between Vigor1000 and Vigor2820 using Agressive mode In this document we will introduce how to create a LAN to LAN IPSec VPN between Vigor1000 and a Vigor2820 using Aggressive mode. We use the following scenario. Case 1: VPN direction from Vigor1000 to Vigor2820 VPN configuration on Vigor1000 1. Create a LAN-to-LAN profile. 2. Enable it and give it a name. In this example the profile name is “Demo”. 3. Enter Vigor2820’s WAN IP address in the Remote IP field. 4.
5. Setup a pre-shared key, which must be the same as in Vigor2820. 6. Setup the Local Identity and Remote Identity, which are for Vigor1000 and Vigor2820 respectively. During IPSec Aggressive mode negotiation, the VPN client must send its identity to the VPN server for verification. The VPN client may also verify the identity of the VPN server, which is optional. In this example we setup ‘Vigor1000’ as the identity of Vigor1000, and ‘vigor2820’ as the identity of Vigor2820. 7.
VPN configuration on Vigor2820 1. Create a LAN-to-LAN profile. 2. Enable it and give it a name. In this example the profile name is “test”.
3. Select Dial-in as Call Direction. 4. In Dial-Out Settings part, select IPSec Tunnel and press the Advanced button. 5. In the pop-up window please enter vigor2820 in the Local ID field. Click OK to return to the profile setting page. 6. In Dial-In Settings part, please enable Specify Remote VPN Gateway and enter Vigor1000 in the Peer ID field. 7. Setup a pre-shared key, which must be the same as in Vigor1000. 8. Enter Vigor1000’s private network in the Remote Network IP / Mask field. 9.
Case 2: VPN direction from Vigor2820 to Vigor1000 VPN configuration on Vigor1000 1. Create a LAN-to-LAN profile. 2. Enable it and give it a name. In this example the profile name is “Demo”. 3. Enter 0.0.0.0 in the Remote IP field. 4. Select Aggressive Mode as IKE phase 1 mode. 5. Setup a pre-shared key, which must be the same as in Vigor2820. 6. Setup the Local Identity and Remote Identity, which are for Vigor1000 and Vigor2820 respectively.
VPN configuration on Vigor2820 1. Create a LAN-to-LAN profile.
2. Enable it and give it a name. In this example the profile name is “test”. 3. Select Dial-Out as Call Direction and enable Always on. 4. Select IPSec Tunnel and enter Vigor1000’s WAN IP address in the Server IP/Host Name for VPN field. 5. Setup a pre-shared key, which must be the same as in Vigor1000. 6. Select ESP (High) and 3DES with Authentication. 7. Press the Advanced button. 8.
3.4 How to configure settings for DLNA Service in Vigor1000 Introduction DLNA (Digital Living Network Alliance) is a framework which personal computer, HDD video recorder, television and other digital devices can share each other data through network connection. The DLNA devices are divided into two functions. One is server side which transmits images, music and video, and the other is client side which receives data only. Some devices support both functions.
2. Make sure Internet connection is done. Open USB Application>>DLNA Server and click Install to install DLNA service into the USB storage device. 3. During the process of installation, you can click Show Detail to view the installation procedure. 4. After finished the service installation, the configuration page will be open automatically. Please click Enable and type a name in the field of Server Name. Then, click OK to activate DLNA service.
5. After enabled successfully, new media device can be seen in My Network Places. The name of the media device is the Server Name configured in Step 4. Note: If you cannot see the media device in Network view, please check and make sure the UPnP service has been enabled Control Panel>>Administrative Tools >>Services.
6. For the users of Windows7, please use Windows Media Player (WMP) to browse and play the files stored in the new service device. For other systems, please use VLC media player (downloaded from Internet) to browse/locate and play the files. Notes z Before removing USB storage device, please DISABLE DLNA service and then remove the device. z The audio and video files might not be played normally due to unrecognized equipment set in client.
3.5 How to download BT Torrent to USB Device via Vigor Router Download BT Torrent 1. Plug USB storage disk into the USB slot of Vigor1000. Access into the web configuration interface of Vigor1000. 2. Open USB Application>>Disk Status. 3. Wait for few seconds for the router to detect it. If the disk is detected, it will be shown as the following figure. 4. Make sure that WAN connection has been established. 5. Open USB Application >> Bit Torrent Download.
6. Simply wait for a few minutes to finish the installation. 7. When the installation is finished, the following page will be displayed. 8. Click the link of Open Web Client to open another window.
9. Click Open. A pop up dialog will appear. 10. Click Select File to open the following dialog. Choose the seed of BT torrent file and click Open. Note: Before uploading torrent files to the router, please search from Internet and store the seed of the BT torrent on our hard disk first.
11. Next, the router will start to download the file to the USB disk. You can add new seed of torrent file one by one by clicking Open to let the router download them at one time. Share the file after downloading completed 1. Access into Vigor1000 web configuration interface and open USB Application >> USB General Settings. Enable the Disk Sharing function by checking the box and click OK. 2. Open USB Application >> Disk Shares. Click Add a New Entry.
3. In the following screen, add a new entry for the sharing folder/name. In this case, we give a name of bt_folder as Share Name for home folder (“/”) . Click OK. 4. Now, PCs in LAN connected to Vigor1000 can open a browser from his / her computer. Simply type “\\192.168.1.1” in the field of Address and then click Go.
5. The sharing disk with the name of “bt_folder” created above will be shown as the following figure. 6. Double click bt_folder to view the files in the disk.
7. If you want to check the BT Torrent files downloaded from Internet to USB disk, access into bt_folder>>downloads. (Note: While the file is downloading, the file extension name will be “part”.
3.6 How to configure Dynamic DNS Service on Vigor1000 DDNS stands for Dynamic DNS. Simply put, using this service gives a name to your IP. If you are hosting something on your line, people wouldn't have to bother typing your IP. They can just type in your domain name. It also helps when your ISP only provides dynamic IP address. Users won't need to discover what your new IP is, they can simply type your domain name. Vigor1000 supports dyndns.org, no-ip.org, chang-ip.com, zoneedit.com, and freedns.afraid.
3. Copy the character strings from the right of the ? in the address bar. 4. Login to Vigor1000 by WUI, and go to Application >>Dynamic DNS page. Select freedns.afraid.org, and fill in the username as you applied for the service. 5. Past the strings what you copied on step3 on password field. 6. Click OK to save the configuration. Now, you can check the service by using nslookup command on your computer or check the syslog information on Vigor1000.
This page is left blank.
Web Configuration This chapter will guide users to execute advanced (full) configuration through admin mode operation. 1. Open a web browser on your PC and type http://192.168.1.1. The window will ask for typing username and password. 2. Please type “admin/admin” on Username/Password for administration operation. Now, the Main Screen will appear. Be aware that “Admin mode” will be displayed on the bottom left side. 4.
From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 What are Public IP Address and Private IP Address As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts.
Below shows the menu items for WAN. 4.1.1 Internet Access This page allows you to set WAN configuration with different modes. Use the Connection Type drop down list to choose one of the WAN modes. The corresponding page will be displayed.
Available settings are explained as follows: Item Description WAN IP Configuration Enable - Check the box to enable the WAN IP configuration. Connection Type -the WAN modes. The corresponding page will be displayed. WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Such function can be applied to each connection type.
Available settings are explained as follows: Item Description Static IP Settings IP Address -Type the IP address. Subnet Mask -Type the subnet mask. Gateway IP Address - Type the gateway IP address. Primary DNS Server -You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server. If your ISP does not provide it, the router will automatically apply default DNS Server IP address: 198.95.1.1 to this field.
Clone MAC Address Enable - It is available when the box of Enable is checked. Click Clone MAC Address. The result will be displayed in the field of MAC Address. After finishing all the settings here, please click OK to activate them. DHCP DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet. If you choose DHCP mode, the DHCP server of your ISP will assign a dynamic IP address for your router automatically.
Clone MAC Address Enable - It is available when the box of Enable is checked. Click Clone MAC Address. The result will be displayed in the field of MAC Address. After finishing all the settings here, please click OK to activate them. PPPoE To choose PPPoE as the accessing protocol of the internet, please select PPPoE from the Internet Access menu. The following web page will be shown.
Item Description Idle Time Out - Set the timeout for breaking down the Internet after passing through the time without any action. When you choose Connect on Demand, you have to type value here. MTU Size- It means Max Transmit Unit for packet. The default setting will be specified by the system automatically. Fixed IP (IPCP)- Usually ISP dynamically assigns IP address to you each time you connect to it and request.
Available settings are explained as follows: Item Description L2TP Settings Username -Type in the username provided by ISP in this field. Password- Type in the password provided by ISP in this field. Server Address- Type in the IP address for PPTP /L2TP server. WAN IP Network Settings- You can choose Static IP or DHCP as WAN IP network setting. IP Address- Type the IP address if you choose Static IP as the WAN IP network setting. Subnet Mask- Type the subnet mask if you chose Static IP as the WAN IP.
Item Description Server IP address: 194.98.0.1 to this field. Redial Policy-If you want to connect to Internet all the time, you can choose Always On. Otherwise, choose Connect on Demand and Idle Time Out-Set the timeout for breaking down the Internet after passing through the time without any action. When you choose Connect on Demand, you have to type value here. MTU Size-It means Max Transmit Unit for packet. The default setting will be specified by the system automatically.
3G USB Modem If your router connects to a 3G modem and you want to access Internet via 3G modem, choose 3G as connection type and type the required information in this web page. Available settings are explained as follows: Item Description 3G USB Modem Settings SIM PIN code-Type PIN code of the SIM card that will be used to access Internet. Modem Initial String1/2-Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP.
56K Modem If your router connects to a 56K modem and you want to access Internet via 56K modem, choose 56K Modem as connection type and type the required information in this web page. Available settings are explained as follows: Item Description 56k Modem Settings Phone Number-Type the phone number offered by the ISP for dial-out connection. PPP Username-Type the PPP username (optional). PPP Password-Type the PPP password (optional).
4G USB Modem If your router connects to a 4G USB modem and you want to access Internet via the modem, choose 4G USB Modem as connection type and type the required information in this web page. Available settings are explained as follows: Item Description 4G USB Modem Settings MTU Size-It means Max Transmit Unit for packet. The default setting is 1360. SIM PIN code-Type PIN code of the SIM card that will be used to access Internet.
4.1.2 Multi-VLAN Vigor1000 series offers multi-VLAN function to make the data transmission with security. Data transmitting through the Ethernet port for connecting to Internet can be tagged with an ID number specified here for ensuring the security. In addition, each LAN port also can be tagged with an ID number in local network to reach the goal of protection. If all the boxes are checked, it means that Internet connection and data transmission can be done via 4 VLAN groups.
VoIP WAN VLAN Setting Enable VoIP WAN Setup - Check the box to enable VoIP WAN configuration. VoIP WAN VLAN ID- Voice sent out through the WAN port will be tagged with VLAN ID number specified here. The range of ID number you can type is from 2 - 4096. VoIP WAN Setting – Click this link to open VoIP WAN setting. IPTV WAN VLAN Setting Enable IPTV WAN Setup- Check the box to enable IPTV WAN configuration.
VoIP WAN Setting / IPTV WAN Setting / Management WAN Setting VoIP WAN/IPTV WAN/Management WAN is the interface specified for the usage of VoIP/IPTV/Management. The settings will be changed based on the connection type selected. When Static IP is selected as connection type, you need to configure the following settings: Available settings are explained as follows: Item Description IP Address Type the IP address obtained from ISP for the usage of VoIP.
When PPPoE is selected as connection type, you need to configure the following settings: Available settings are explained as follows: Item Description Username Type the name obtained from the ISP. Password Type the password obtained from the ISP. Confirm Password Type the password again for confirmation. MTU Size It means Max Transmit Unit for packet. The default setting will be specified by the system automatically. Therefore, keep this field in blank.
Speed Configured You can use the drop down list to choose the required speed for the router. If you have no idea in configuring speed, simple use the default setting, Auto. Flow Control If flow control is enabled by checking Configured box, both parties can send PAUSE frame to the transmitting device(s) if the receiving port is too busy to handle. If not, there will be no flow control in the port. It drops the packet if too much to handle.
After finishing all the settings here, please click OK to activate them. 4.1.4 Backup This page is used to setup 3G/56K backup function. If you enable 3G/56K backup, make sure your WAN connection type is not in 3G/56K mode. When the WAN connection is broken, router will try to keep the connection with 3G/56K mode. After WAN connection is recovered, router will disconnect the 3G/56K connection automatically.
3G Backup Available settings are explained as follows: Item Description 3G Backup Enable 3G Backup- Check this box to enable such function. SIM PIN code- Type PIN code of the SIM card that will be used to access Internet. Modem Initial String1/2- Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. APN Name- APN means Access Point Name which is provided and required by some ISPs.
56K Backup When the WAN connection is broken, router will try to keep the connection with 56K mode if it is enabled. After WAN connection is recovered, router will disconnect the 56K connection automatically. Available settings are explained as follows: Item Description 56K Backup Enable 56K Backup- Check this box to enable such function. Phone Number- Type the phone number offered by the ISP for dial-out connection. PPP Username- Type the PPP username (optional).
4.2 LAN Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP. Basics of LAN The most generic function of Vigor router is NAT. It creates a private subnet of your own. As mentioned previously, the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address.
What is Routing Information Protocol (RIP) Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing. This allows users to change the information of the router such as IP address and the routers will automatically inform for each other. What is Static Route When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other method.
4.2.1 General Setup This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup. Available settings are explained as follows: Item Description LAN IP Network Configuration For NAT Usage IP Address - Type in private IP address for connecting to a local private network (Default: 192.168.1.1). Subnet Mask- Type in an address code that determines the size of the network. (Default: 255.255.255.
DHCP Server Configuration Force DNS manual setting Enable Server - DHCP stands for Dynamic Host Configuration Protocol. The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client. It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network. You can configure the router to serve as a DHCP server for the 2nd subnet.
4.2.2 Ports Ports page is used to change the setting for LAN ports. You can set or reset the following items. All of them are described in detail below. Available settings are explained as follows: Item Description Port It displays current network interface. Link It displays current connection status. Green light means the WAN connection is successful. Speed Current It displays current speed that the router uses.
Excessive Collision Mode There are two modes for you to choose when excessive collision happened in half-duplex condition. Discard - It determines whether the MAC drops frames after an excessive collision has occurred. If yes, a frame is dropped after excessive collision. This is IEEE Standard 802.3 half-duplex flow control operation. Restart - It determines whether the MAC retransmits frames after an excessive collision has occurred.
4.2.3 MAC Address Table This page allows you to set timeouts for entries in dynamic MAC Table and configure the static MAC table here. Available settings are explained as follows: Item Description Disable Automatic Aging Stop the MAC table aging timer, the learned MAC address will not age out automatically. The default setting is enabled. Check the box to disable this function if required.
Static MAC Table Config.. Specify static MAC address with VLAN ID to apply aging configuration. Delete - Click the button to remove the VLAN setting. LAN ID - Specify the interface for the port members. MAC Address - It is a six-byte long Ethernet hardware address and usually expressed by hex and separated by hyphens. For example, 00 – 40 - C7 - D6 – 00 – 02. WAN/LAN1~4 - Check the port to apply this VLAN setting. To add a new static MAC entry, click Add New Static Entry.
To add or remove a VLAN, please refer to the following example. 1. VLAN 1 is consisted of hosts linked to P1 ~ P4. 2. After checking the box to enable VLAN function, you will check the table according to the needs as shown below. 3. To remove VLAN, click the Delete button for the one you want to remove and click OK to save the results. 4.2.5 Monitor Port It is used to monitor the traffic of the network.
Enable Monitor Port Check to enable this function. Monitor Port Click the one of the LAN ports to specify it for monitoring. Monitor ingress port Check to set up the port(s) for being monitored. It only monitors the packets received by the port you set up. Monitor egress port Check to set up the port(s) for being monitored. It only monitors the packets transmitted by the port you set up. 4.2.6 Static Route Go to LAN to open setting page and choose Static Route.
1. Click the LAN - Static Route and click Add. Check the Enable box. Please add a static route as shown below, which regulates all packets destined to 192.168.10.0 will be forwarded to 192.168.1.2. Click OK. 2. Return to Static Route page. Click Add again to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. 3. Verify current routing table.
4.2.7 Policy Route Such function allows you to determine the direction of data transmission from the specified source IP to the specified destination IP. In addition, the data can be sent to the specified gateway via the WAN or LAN interface. Available settings are explained as follows: Item Description Set to Factory Default Click this link to return to the factory default settings. Clear Routing Cache Click this link to clear the routing cache data.
Available settings are explained as follows: Item Description Enable Check this box to enable this policy route. Source IP Address Type the source address of the policy route. Subnet Mask Type the subnet mask for the source IP address. Destination Address Display the destination address of the policy route. Subnet Mask Type the subnet mask for the destination IP address. Gateway IP Address Display the IP address of the gateway.
Available settings are explained as follows: Item Description Enable Click this radio button to invoke this function. However, IP/MAC which is not listed in IP Bind List also can connect to Internet. Disable Click this radio button to disable this function. All the settings on this page will be invalid. Strict Bind Click this radio button to block the connection of the IP/MAC which is not listed in IP Bind List. ARP Table This table is the LAN ARP table of this router.
Edit It allows you to edit and modify the selected IP address and MAC address that you create before. Delete You can remove any item listed in IP Bind List. Simply click and select the one, and click Remove. The selected item will be removed from the IP Bind List. Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC. If not, no one of the PCs can access into Internet. And the web configurator of the router might not be accessed. Click OK to save the settings. 4.
With Hardware NAT, LAN to WAN NAT throughput can be over 900M bps. But be sure that your PC has Giga Ethernet and connect with CAT6 Ethernet cable. Click OK to save the settings. 4.3.2 Open Ports Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc.
Protocol Specify the transport layer protocol. It could be TCP, UDP and TCP+UDP. WAN IP Specify one WAN IP address to be used by such profile. The default setting is ALL, which mean such profile can be applied for all the WAN IP addresses. Start Port Specify the starting port number of the service offered by the local host. End Port (optional) Specify the ending port number of the service offered by the local host. Local Host Enter the private IP address of the local host.
4.3.3 DMZ Host As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port. Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN.
Click OK to save the settings. 4.4 Firewall Basics for Firewall While the broadband users demand more bandwidth for multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders. It also restricts users in the local network from accessing the Internet.
Frame Type Set the Unicast storm rate control, multicast storm rate control, and a broadcast storm rate control for your router. Status Check this box to enable storm control status for the frame type. Rate The unit is packet per second (pps). Use the drop down list to set the rate for data transmission. The rate is 2^n, where n is equal to or less than 15, or "No Limit". The unit of the rate can be either pps (packets per second) or kpps (kilopackets per second).
Rate Limiter ID Select a rate limiter to apply to this port. Available settings include Disabled, and 1 to 10. The default value is Disabled. Counter Counts the number of frames that match this Access Control Entry (ACE). Refresh Click this button to refresh the number of the counter immediately. Clear Click this button to clear the number of the counter on this page. Click OK to save the settings. Rate Limiter ID Configure the rate limiter for the ACL (Access Control List) of the router.
Rate Define the rate by choosing from the following drop down list. Click OK to save the settings.
4.4.3 Access Control List This page can define which kind of packet can access the router. The packet can be defined with input port, Frame type, Rate, MAC type, VLAN ID, tag and etc. For IPv4, we can also define the protocol type, source IP and destination IP. Adding a New Access Control Profile Click to add a new specific session limitation onto the list. Define which port the packet comes from.
Available settings are explained as follows: Item Description ACE Configuration Ingress Port – define which port the packet coming from. The policy IDs are defined in Firewall>>Port Configuration. Each Policy ID might have more than one port grouped. Frame Type - Such option differs according to the selection you choose, we will explain it in detailed later. Action – it means the session limitation for this access control list will be applied to if matching with the rule defined in this page.
z z Choose Ethernet Type as the Frame Type, you will get Ethernet Type Parameters option as the following: Item Description Ethernet Type Filter Choose Any to set the parameter with any value set by the router automatically or choose Specific to specify certain value (the range is 0x0000 to 0xFFFF). Choose ARP as the Frame Type, you will get ARP Parameters option as the following: Item Description ARP/RARP Choose the ARP/RARP that you want to filter.
Sender IP Filter Specify the sender IP filter for this ACE. Choose Any to filter all of the packets. Choose Host to filter the packets from the host with the address typed in Sender IP Address filed. Choose Network to filter the packets within the network defined in Sender IP Address and Sender IP Mask fields. Sender IP Address Type the Sender IP Address here. This option is available when you choose Host or Network as Sender IP Filter. Sender IP Mask Type the Sender IP Mask here.
RARP DMAC Match Specify whether frames can hit the action according to their target hardware address field (THA) settings. 0: means target hardware address is not equal to the SMAC address. 1: means s target hardware address is equal to the SMAC address. Any: means any value is allowed. IP/Ethernet Length Specify whether frames/packets can meet the action according to the ARP/RARP hardware address length (HLN) and protocol address length (PLN) settings.
Ethernet Specify whether frames can hit the action according to their ARP/RARP protocol address space (PRO) settings. 0: ARP/RARP frames where the protocol address space is equal to IP (0x800) must not match this entry. 1: ARP/RARP frames where the protocol address space is equal to IP (0x800) must match this entry. Any: Any value is allowed. z Choose IPv4 as the Frame Type. You will see IP Parameters on the bottom of the page.
IP Parameters Dest IP Filter-Specify the destination IP filter for this ACE. Any: No destination IP filter is specified. Host: Destination IP filter is set to Host. Specify the destination IP address in the Dest IP Address field that appears. Network: Destination IP filter is set to Network. Specify the destination IP address and destination IP mask in the DIP Address and Dest IP Mask fields that appear. Dest IP Address-Type the Dest IP Address here.
Item Description IP Parameters Source IP -Specify the source IP filter for this ACE. Any: No source IP filter is specified. Host: Source IP filter is set to Host. Specify the source IP address in the Source IP Address field that appears. Network: Source IP filter is set to Network. Specify the source IP address and source IP mask in the Source IP Address and Source IP Mask fields that appear. Source IP Address-Type the Source IP Address here.
UDP Parameters Source Port Filter-Specify the UDP port source filter for this ACE. Any: No UDP source filter is specified. Specific: If you want to filter a specific UDP source filter with this ACE, you can enter a specific UDP source value. A field for entering a UDP source value appears. Range: If you want to filter a specific UDP source range filter with this ACE, you can enter a specific UDP source range value. A field for entering a UDP source port range appears. Source Port No.
z Choose IPv4 as the Frame Type. You will see IP Parameters on the bottom of the page. If you choose TCP as IP Protocol Filter, you will get the page as the following: Item Description IP Parameters Source IP-Specify the source IP filter for this ACE. Any: No source IP filter is specified. Host: Source IP filter is set to Host. Specify the source IP address in the source IP Address field that appears. Network: Source IP filter is set to Network.
IP Parameters Dest IP Address-Type the destination IP Address here. This option is available when you choose Host or Network as destination IP filter. Dest IP Mask-Type the destination IP Mask here. This option is available only when you choose Network as destination IP filter. Source Port Filter-Specify the TCP port source filter for this ACE. Any: No TCP source filter is specified. Specific: If you want to filter a specific TCP source filter with this ACE, you can enter a specific TCP source value.
TCP Parameters TCP FIN-Specify the TCP "No more data from sender" (FIN) value for this ACE. 0: TCP frames where the FIN field is set must not be able to match this entry. 1: TCP frames where the FIN field is set must be able to match this entry. Any: Any value is allowed. TCP SYN-Specify the TCP "Synchronize sequence numbers" (SYN) value for this ACE. 0: TCP frames where the SYN field is set must not be able to match this entry. 1: TCP frames where the SYN field is set must be able to match this entry.
z Choose IPv4 as the Frame Type. You will see IP Parameters on the bottom of the page. If you choose Other as IP Protocol Filter, you will get the page as the following: Item Description IP Parameters IP Protocol Value -When "Other" is selected for the IP protocol filter, you can enter a specific value here. The range is 0 to 255. The default value is “255”.A frame meeting this ACE matches this IP protocol value. Source IP -Specify the source IP filter for this ACE.
destination IP address and destination IP mask in the destination IP address and destination IP mask fields that appear. Dest IP Address-Type the Dest IP Address here. This option is available when you choose Host or Network as destination IP filter. Dest IP Mask-Type the Dest IP Mask here. This option is available only when you choose Network as destination IP filter. 4.4.
Available settings are explained as follows: Item Description Enable Check the box to enable such rule. Name Type a name of the rule for identification. Source Specify the interface for the starting point. Destination Specify the interface for the ending point. Protocol Specify the protocol(s) which this filter rule will apply to. Source Port / Destination Port Type a fixed port number or a range of port number for such rule. Available value is 1 ~ 65535.
Time Profile Specify a period for filtering the packets with web feature filter. Use the drop down list to choose the time setting, or click New Time Object to define a time period for you necessity. New Time Object – Such link allows you to create new time object for using by web feature filter. The method to configure the time object is that same as set in Firewall>>Time Object. Click OK to save the settings.
4.5 CSM CSM is an abbreviation of Content Security Management which is used to control IM/P2P usage, filter the web content and URL content to reach a goal of security management. 4.5.1 URL Content Filter To provide an appropriate cyberspace to users, URL Content Filter not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web feature where malicious code may conceal. Vigor router also can prevent user from accidentally downloading malicious codes from web pages.
Time –Specify a period for filtering the packets with web feature filter. Use the drop down list to choose the time setting, or click New Time Object to define a time period for you necessity. New Time Object – Such link allows you to create new time object for using by web feature filter. The method to configure the time object is that same as set in Firewall>>Time Object.
4.5.2 Web Content Filter We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible parent or employer, you should protect those in your trust against the hazards. With Web filtering service of the Vigor router, you can protect your business from common primary threats, such as productivity, legal liability, network and security threats. For parents, you can protect your children from viewing adult websites or chat rooms.
Available settings are explained as follows: Item Description Name Type a name for the profile. Enable Check the box to enable the web content filter. Source IP Type a range for the IP addresses (e.g, 192.168.1.12 ~ 192.168.1.20) of this profile. Time Use the drop down list to choose one of the time profiles. Such WCF profile will be activated on the time specified in the selected time profile.
Status Display the service provider for current used WCF mechanism. Child Protection / Leisure /Business / Chating / Computer / Other Each category offers several items for you to choose. Click Select All to check all of the items under the selected category, or click Clear All to cancel the items selections. After finished the configuration, click OK to save the settings and exit the page. The new added WCF profile will be displayed on the screen.
this page. Each tab will bring out different items that you can choose to disallow/allow people using. Available settings are explained as follows: Item Description Enable Check the box to enable such rule. Name Type a name of the rule for identification. Source IP Type IP address in LAN. Packets passing through such IP address will be filtered by the router. Mask Type the mask for the source IP. Action Block – Packets matching with such rule will be blocked by the router.
Time Profile Specify a period for filtering the packets with web feature filter. Use the drop down list to choose the time setting, or click New Time Object to define a time period for you necessity. New Time Object – Such link allows you to create new time object for using by web feature filter. The method to configure the time object is that same as set in Firewall>>Time Object. Simply check the box(s) that you want to block and click OK to save the settings. 4.
Available settings are explained as follows: Item Description Enable activate the function of limit session, simply click Enable and set the default session limit. Disable Click this button to close the function of limit session. Default Sessions Limit- Defines the default session number used for each computer in LAN. Limitation List Displays a list of specific limitations that you set on this web page. Specific Limitation Start IP - Defines the start LAN IP address for limit session.
4.6.2 Bandwidth Limit The downstream or upstream from FTP, HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs. Please use Limit Bandwidth to make the bandwidth usage more efficient. In the Bandwidth Management menu, click Bandwidth Limit to open the web page. Available settings are explained as follows: Item Description Disable Disable this function.
Limitation List Limitation List - Display a list of specific limitations that you set on this web page. Start IP - Bandwidth limit can be applied on certain IP range. That’s, only the PCs within the range will be influenced by the bandwidth limitation set here. Please define the start IP address for the specific limitation. End IP - Define the end IP address for the specific limitation. TX Limit - Define the limitation for the speed of the upstream to be applied as specific limitation.
4.6.3 Port Rate Control A policer can limit the bandwidth of received frames. It is located in front of the ingress queue. And a shaper can limit the bandwidth of transmitted frames. It is located after the ingress queues. This page allows you to configure the switch port rate limit for Policers and Shapers. Available settings are explained as follows: Item Description Port Represent LAN or WAN interface.
(or in another term “dropped”) from an overflowing queue, packets of sensitive applications mentioned above might be the ones to drop off. How this will affect application performance? There are two components within Primary configuration of QoS deployment: z Classification: Identifying low-latency or crucial applications and marking them for high-priority service level enforcement throughout the network.
Available settings are explained as follows: Item Description QCE Type Display the type of that QCE (QoS Control Entries). Type Value Display the value specified for the QCE. Traffic Class Display the class of the data transmission for the QCE. QoS Control List (QCL) allows users to set up to five groups of QCL. Each QCL group can contain 12 QCE settings. Adding a New QCE Click settings. z to add a new QCE onto this page.
Available settings are explained as follows: Item Description Ethernet Type Value Either 8~63 ASCII characters, such as 012345678(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). z If you choose VLAN ID as QCE Type, you have to type the ID number for it and specify traffic class from Low, Normal, Medium and High. z If you choose TCP/UDP Port as QCE Type, you have to type the port number for it and specify traffic class from Low, Normal, Medium and High.
z If you choose DSCP as QCE Type, you have to type value for it and specify traffic class from Low, Normal, Medium and High. z If you choose ToS as QCE Type, you have to specify priority class from Low, Normal, Medium and High. z If you choose Tag Priority as QCE Type, you have to specify priority class from Low, Normal, Medium and High. Editing a QCE Click to modify the settings of an existing QCE on this page.
Moving Up/Down a QCE Click and to move a QCE up and down. Deleting a QCE To delete a QCE in the list, simply click of that one. It will be removed immediately. 4.6.5 Ports Priority This page allows you to configure QoS settings for each port. The classification is controlled by a QCL (Quality Control List) that is assigned to each port. A QCL consists of an ordered list of up to 12 QCEs (Quality Control Entry). Each QCE can be used to classify certain frames to a specific QoS class.
QCL (QoS Control List ) Use the drop down list to choose the QCL number defined in QoS Control List for the port. Queuing Mode Use the drop down list to choose suitable mode. Queue Weighted Use the drop down list to choose 1, 2, 4, or 8 as the queue weighted number. Click OK to save the settings. 4.6.6 QoS Statistics This page displays statistics for QoS setting. Click WAN/LAN link to check detailed information for each interface. Click WAN/LAN link to check detailed information for each interface.
Available settings are explained as follows: Item Description WAN/LAN Choose WAN or LAN to display the corresponding statistics. Auto-refresh Check it to enable auto-refresh function. Refresh Click it to reload the page. Clear Click it to clear the counters for all ports. Receive Total Rx Packets - Display the counting number of the packet received. Rx Octets - Display the total received bytes. Rx Unicast - Display the counting number of the received unicast packet.
frames in good and bad packets received. RX 128-255 Bytes - Display the number of 128 ~ 255-byte frames in good and bad packets received. RX 256-511 Bytes - Display the number of 256 ~ 511-byte frames in good and bad packets received. RX 512-1023 Bytes - Display the number of 512 ~ 1023-byte frames in good and bad packets received. RX 1024- 1526 Bytes - Display the number of 1024-1522-byte frames in good and bad packets received.
frames in good and bad packets transmitted. Tx 128-255 Bytes - Display the number of 128 ~ 255-byte frames in good and bad packets transmitted. Tx 256-511 Bytes - Display the number of 256 ~ 511-byte frames in good and bad packets transmitted. Tx 512-1023 Bytes - Display the number of 512 ~ 1023-byte frames in good and bad packets transmitted. Tx 1024- 1526 Bytes - Display the number of 1024 ~ 1522-byt frames in good and bad packets transmitted.
www.no-ip.com, www.dtdns.com, www.changeip.com, www.dynamic- nameserver.com. You should visit their websites to register your own domain name for the router. Each item can be explained as follows Item Description Index Display the DDNS profile link. Setting Display a brief description for the profile. Status Display the status (disabled or enabled) of the profile. Add Allow you to add a new profile. View Log Allow you to view the log of the DDNS profile.
IP Source Determine the IP source for DDNS server. My WAN IP – Use IP configured for WAN interface for DDNS server. My Internet IP – Use true IP for DDNS server. Check IP change every Set the interval for checking the information. Force IP update every Force the router updates its information to DDNS server with the interval set here. Click OK button to activate the settings. You will see your setting has been saved. 4.7.
Item Description Enable Check to enable the schedule. Start Date Specify the starting date of the schedule. Start Time Specify the starting time of the schedule. Action Specify which action should be applied during the period of the schedule. WAN UP/DOWN – WAN connection will be activated / inactivated based on the time schedule configured here. WiFi UP/DOWN – Wireless Wi-Fi connection will be activated / inactivated based on the time schedule configured here.
Available settings are explained as follows: Item Description IGMP Proxy Configuration IGMP Proxy Enabled - Check the box to enable this function. The IGMP proxy can act as a multicast proxy for hosts on LAN sides. If you enable such function, you can access any multicast group whenever you want. IGMP Proxy Channel – Use the drop down list to choose the proxy channel. (Disable) means that channel has not been enabled.
Available settings are explained as follows: Item Description Auto-refresh Check it to enable auto-refresh function. Refresh Click this button to refresh the page immediately. Clear Click this button to clear the settings on this page. V1~3 Reports Receive Display the number of Received V1 – V3 Reports. V2 Leave Receive Display the number of Received V2 Leave. Groups Display current IGMP groups. Maximum number of group for each VLAN can be set is 128.
Available settings are explained as follows: Item Description Enable UPnP Enable UPnP function. You have to type the download and upload speed. Download Speed Enter the maximum sustained WAN download speed in kilobits/second. Such information can be requested by UPnP clients. Upload Speed Enter the maximum sustained WAN upload speed in kilobits/second. Such information can be requested by UPnP clients.
The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will block the accessing ability of some network ports. Security Considerations Activating the UPnP function on your network may incur some security threats. You should consider carefully these risks before activating the UPnP function.
Available settings are explained as follows: Item Description Wake by Two types provide for you to wake up the bond IP. If you choose Wake by MAC Address, you have to type the correct MAC address of the host in MAC Address boxes. If you choose Wake by IP Address, you have to choose the correct IP address. IP Address The IP addresses that have been configured in LAN>>Bind IP to MAC will be shown in this drop down list. Choose the IP address from the drop down list that you want to wake up.
Profile Display the name of the profile. Service Display the Service Provider which supports SMS. Destination Display the telephone number of the user who will receive the SMS. Status Display if such service is enabled or disabled. Add It allows you to create a new profile. Click Add to create a new SMS profile. Available settings are explained as follows: Item Description Enable Check the box to enable this profile. Profile Name Type the name of the profile.
service should be charged. Such function can save the money of the user to avoid money waste. If there is no need to configure quota, simply type 0 in this field. Then, there is no limit for the amount of SMS sent. Interval (seconds) Type the shortest time interval for the system to send SMS. For example, it is set with 60 (seconds). If WAN1 disconnects for three times within 60 seconds, the system will send the SMS notification just for once.
Enable IPSec VPN Service If this checkbox is checked, the system firewall will allow VPN (IPSec) remote access from WAN side to the router. Enable IPSec VPN Pass-through (Server inside your LAN) If this checkbox is checked, the system firewall will allow VPN (IPSec) remote access from WAN side to a VPN device on the LAN. Type the IP address of the VPN device in the field next to the checkbox.
Available settings are explained as follows: Item Description Enable Check this box to enable such user profile. Username Type a name for this user. Full Name Type full name for this user. Password Type the password for this user. Confirm Password Type the password again for confirmation. Allow Disk Sharing Check this box to have the remote user share the disk information. Allow IPSEC/L2TP Check this box to let the remote user connecting to this device through IPSEC/L2TP.
local network / mask. Remote Network/Mask – If you choose LAN to LAN as Allowed Dial-In Type, you have to type the IP address as remote network /mask. Allow FTP Check this box to let the remote user connecting to FTP server via this router. Allow TELNET Check this box to let the remote user to adjust the settings of router by TELNET. When you finish the settings, simply click OK to save the configuration. The new user will be created and displayed on the page.
Editing/Deleting User Settings To edit a user, click the name link under Username to open the following page. Modify the settings except Username and then click OK to save and exit it. If you want to remove such user settings, simply click Delete User.
4.8.3 IPSec Remote Dial-in This page allows you to configure IPSec Site-to-Client settings. Available settings are explained as follows: Item Description Mobile VPN Type This usually applies to those are remote dial-in user or node (LAN-to-LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel. Disabled – Ignore the configurations set in this page. Dynamic VPN (IPSec) – Traffic between this subnet and the client will travel through the VPN tunnel.
Authentication Type – There are two types for you to choose for authentication. If you choose Certificate as the Type, you have to specify one of the local certificates. If you choose Pre-Shared Secret as the Type, you have to type and confirm the shared secret. IPSec remote dial-in clients will use the given secret.
4.8.4 Remote Dial-in Status You can find the summary table of all dial-in user status. Available settings are explained as follows: Item Description Auto-refresh Check this box to make the system refresh this page automatically. Refresh Click this button to refresh the page immediately. Client Display the name of the VPN IPSec/Mobile client. Identity Display the remote ID of the VPN client. Endpoint Display the IP address of the VPN client.
4.8.5 LAN to LAN Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including specified connection peer ID, connection type and corresponding security methods, etc. The router supports two VPN tunnels for IPSec and PPTP by providing up to 2 profiles. The following figure shows the summary table. Available settings are explained as follows: Item Description Auto-refresh Check this box to make the system refresh this page automatically.
Adding a VPN Tunnel for IPSec Click Add Tunnel to open the following page.
Available settings are explained as follows: Item Description General Enabled - Check here to activate this tunnel. Always On - Check this box to make the WAN connection being activated always. Name - Specify a name for this tunnel. Remote IP/Host Name - Enter the IP address/FQDN of the remote host that located at the other-end of the VPN tunnel. IKE phase 1 mode - Select from Main mode and Aggressive mode. The ultimate outcome is to exchange security proposals to create a protected secure channel.
box to change the default route to this configured VPN tunnel. Advanced Security Settings IKE Phase 1 proposal - Propose the local available authentication schemes and encryption algorithms to the VPN peers, and get its feedback to find a match. IKE Phase 2 proposal - Propose the local available algorithms to the VPN peers, and get its feedback to find a match. IKE phase 1 key lifetime-For security reason, the lifetime of key should be defined. The default value is 28800 seconds.
Adding a VPN Tunnel for PPTP Click Add Tunnel to open the following page. Available settings are explained as follows: Item Description Dial-Out General Setting Enabled - Check here to activate this tunnel. Always On - Check this box to make the WAN connection being activated always. Name - Specify a name for this tunnel. Remote IP - Enter the IP address/name of the remote host that located at the other-end of the VPN tunnel. Authentication User Name - Type a name for this tunnel for authentication.
connection. Route/NAT Mode - If the remote network only allows you to dial in with single IP, please choose NAT Mode, otherwise please choose Route Mode. Change default route to this VPN tunnel - Check this box to change the default route into such VPN tunnel. Edit PPTP Dial-in Tunnel PPTP Dial-In Tunnel - If it is required, click Add Tunnel link to access into VPN and Remote Access>>PPTP Remote Dial-in page for adding other dial-in tunnel. Refer to the section 4.8.2 for detailed information.
4.9.1 Trusted CA Certificate The CA (certification authority) certificate specified in this page is the issuer of the certificates for both clients requesting for network connection. It allows you to import the third-party certificate authenticated by other certification authority (CA), or build My RootCA to be used as a CA for signing the local certicate. Just create a new Trust CA Certificate first.
You can import other Root CA certificates made by others and upload to Vigor router as CA. Simply click IMPORT to access into the following page. Available settings are explained as follows: Item Description Name Type a new name for such certificate. Certificate file Use the Browse.. button to specify the file. Upload - After choosing the certificate file above, click this button to upload onto the router. Paste Certificate below You many paste the information of the certificate from other files.
If you want to create your Root CA certificate for the router adopting for issuing local certificate and certificate request from the remote client, simply click Build RootCA to access into the following page. Available settings are explained as follows: Item Description General Name - Type a new name for such certificate. Keylength - Specify the length of the certificate. Certificate Subject Country (ISO) - Type the abbreviation of your country in this field. State - Type the state that you live.
4.9.2 Local Certificate This page displays the certificate which will be authenticated for network connection. Note that it must be issued by Trusted CA Certificate first. You have to generate a local certificate to be signed by trusted CA (no matter My Root CA or other Root CA). After that, import the signed certificate to this page. Available settings are explained as follows: Item Description Auto-refresh Click the button to refresh current page automatically.
Available settings are explained as follows: Item Description General Name - Type a new name for such certificate. Keylength - Specify the length of the certificate. Sign by My Root CA – If you have created a Root CA for yourself, the check box will be available for you to activate. If you do not check the box, then such local certificate might be signed by other Root CA in default. Certificate Subject Country (ISO) - Type the abbreviation of your country in this field.
4.9.3 Issue Certificate Vigor router can be used as a Root CA to authenticate and issue the certificates request coming from other clients. vailable settings are explained as follows: Item Description Certificate file Use the Browse.. button to specify the file. Issue - After choosing the certificate file above, click this button to issue the certificate. Paste Certificate below You many paste the information of the certificate from other files.
Note: * The actual data throughput will vary according to the network conditions and environmental factors, including volume of network traffic, network overhead and building materials. In an Infrastructure Mode of wireless network, Vigor wireless router plays a role as an Access Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the same Internet connection via Vigor wireless router.
4.10.2 General Setup By clicking the General Setup, a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Available settings are explained as follows: Item Description General Setting Enable Wireless LAN - Check the box to enable the wireless function. Show/Hide- Choose Show to make the SSID being seen by wireless clients.
harder for unauthorized clients or STAs to join your wireless LAN. SSID- It means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "DrayTek". We suggest you to change it. Isolate LAN- Check this box to make the wireless clients (stations) not accessing the PC with wired connection. Isolate Member- Check this box to make the wireless clients (stations) with the same SSID not accessing for each other.
Each encryption mode will bring out different web page and ask you to offer additional configuration. Click OK to save the settings.
Wireless Security Configuration For the security of your system, choose the proper encryption for data transmission. Different encryption mode will bring out different setting encryption ways. z None The encryption mechanism is turned off. z WEP Accepts only WEP clients and the encryption key should be entered in WEP Key. Available settings are explained as follows: z Item Description Default Key All wireless devices must support the same WEP encryption bit size and have the same key.
Available settings are explained as follows: z Item Description WPA Mode Select WPA, WPA2 or Auto as the type. WPA Algorithm Select TKIP, AES or auto as the algorithm for WPA. WPA Pre-Shared Key Either 8~63 ASCII characters, such as 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). WPA-RADIUS The built-in RADIUS client feature enables the router to assist the remote dial-in user or a wireless station and the RADIUS server in performing mutual authentication.
802.1x authentication. Select WPA, WPA2 or Auto as WPA mode. z WPA Algorithm Choose the WPA algorithm, TKIP, AES or Auto. Server IP Address Enter the IP address of RADIUS server. Destination Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138. Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret.
passphrase to setup a wireless client every time. He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. Note: Such function is available for the wireless station with WPS supported. There are two methods to do network connection through WPS between AP and Stations: pressing the Start PBC button or using PIN Code.
4.10.3 Access Control For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client. Only the valid MAC address that has been configured can access the wireless LAN interface. By clicking the Access Control, a new web page will appear, as depicted below, so that you could edit the clients' MAC addresses to control their access rights (deny or allow).
4.10.4 Station List Station List provides the knowledge of connecting wireless clients now along with its status code. Available settings are explained as follows: Item Description Auto-refresh Check this box to force the system refreshing the table automatically. Refresh Click this button to refresh current page. Index Display the number of the connected station. IP Address Display the WAN IP address for the connected station. MAC Address Display the MAC Address for the connected station.
4.10.5 Access Point Discovery Vigor router can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know which channel is clean for usage. Note: During the scanning process (about 5 seconds), no client is allowed to connect to Vigor. The table will list channel, SSID, BSSID, Security and the Signal strength of working APs in the neighborhood. Available settings are explained as follows: Item Description CH Display the channel for the scanned AP.
4.10.6 WMM Configuration WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access categories derived from 802.1d (prioritization tabs). The categories are designed with specific types of traffic, voice, video, best effort and low priority data. There are four accessing categories - AC_BE , AC_BK, AC_VI and AC_VO for WMM. APSD (automatic power-save delivery) is an enhancement over the power-save mechanisms supported by Wi-Fi networks.
categories must be smaller; however, the difference between AC_BE and AC_BK categories must be greater. Txop It means transmission opportunity. For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission, please set greater value for them to get highest transmission opportunity. Specify the value ranging from 0 to 65535. ACM It is an abbreviation of Admission control Mandatory. It can restrict stations from using specific category class if it is checked.
4.10.7 WDS WDS means Wireless Distribution System. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y y Provide bridge traffic between two LANs through the air. Extend the coverage range of a WLAN. To meet the above requirement, two WDS modes are implemented in Vigor router. One is Bridge, the other is Repeater.
In Bridge mode, the router will connect to up to four Vigor1000 which use the same mode, and all wired Ethernet clients of every Vigor1000 will be connected together. You can use this mode to connect a network to other networks which is physically isolated. Please note that when you set to this mode, Vigor1000 will not accept regular wireless clients anymore.
to be entered in this page at one time. Phy Mode There are three types of transmission rates developed by different techniques for Phy Mode. Data will be transmitted via communication channel. CCK – If 802.11b wireless mode is used, please choose such type as the Phy Mode. OFDM – If 802.11g wireless mode is used, please choose such type as the Phy Mode. HTMIX – If 802.11b/g/n wireless mode is used, please choose such type as the Phy Mode.
Available settings are explained as follows: Item Description Safely Remove Disk Check this box and then you can remove the USB disk safely. Manufacturer Display the manufacturer of the disk. Model Display the type of the disk. Size Display the storage space of the disk. Free Capacity Display the free disk space of the disk. Status Display current usage status of the disk Update Check the box of Safely Remove Disk, then click this button to update the disk status.
4.11.3 File Explorer To review the content of USB diskette via USB port of the router, please open USB Application Explorer to browse the files. Available settings are explained as follows: Item Description Refresh Back Create Click this icon to refresh files list. Click this icon to return to the upper directory. Click this icon to add a new folder. Current Path Display current folder. Upload Click this button to upload the selected file to the USB diskette.
4.11.4 FTP User Management This page allows you to change user setting for USB storage disk. Before modifying settings in this page, please insert a USB disk and configure settings in User>>User Configuration first. Otherwise, an error message will appear to warn you. At present, the Vigor router can support USB storage disk with versions of FAT16/32 and NTFS only.
Home Folder It determines the range for the client to access into. The user can enter a directory name in this field. Then, after clicking OK, the router will create the specific/new folder in the USB diskette. In addition, if the user types “/” here, he/she can access into all of the disk folders and files in USB diskette. Note: When write protect status for the USB diskette is ON, you cannot type any new folder name in this field. Only “/” can be used in such case.
Visible It displays the status of the connected USB disk. To add a new entry for disk sharing, please click Add a New Entry to open the following page. Available settings are explained as follows: Item Description Share Name Type a name to be known by other computers in local network. The name must not contain spaces or special characters. Comment Type the brief description for the disk sharing. The words here will be seen in Network Neighborhood on Windows client computers.
All Users Read-only - everyone has read-only access to the share disk. All Users Read-write - everyone has read-write access to the share disk. Specific Users – Only specific user(s) can access into the share disk. 4.11.6 Bit Torrent Download There are many seeds of BT Torrents in Internet for users to download preferred video file, image file and so on. In general, the downloaded files would be stored in the computer. However, if the computer is shut down, the file downloading also will be terminated.
Available settings are explained as follows: Item Description BT Function Enable – Click it to enable BT download function after powering your computer. Disable – Click it to disable BT download function after powering your computer Start – Start the BT download process. Stop – Stop the BT download process. Listening Port Type the port number to listen for incoming peer connection. Max Peer Connections Type a number of the peers that can connect to the router at one time.
Password Type a password for authentication. Web Client Port Type a port number for accessing Open Web Client. Remote Management Enable – Click it to enable remote control for BT torrent download. Disable – Click it to disable remote management function. OK Save the settings. Uninstall Cancel the module installation settings and exit the dialog. For the detailed information of BT Torrent application, please refer to Chapter 5. 4.11.
Disable – Click it to disable iTunes Server function. Server Name The default name is the router name. You can change it if needed. Path After storing the media files in the USB storage device, please specify a path for the files to be accessed for iTunes service. “/” is the symbol for the top folder of USB storage. Rescan Interval The USB storage disk will be scanned by iTunes Server again based on the time interval set here. The unit is second. OK Save the settings.
Available settings are explained as follows: Item Description DLNA Server Enable – Click it to enable DLNA Server function. Disable – Click it to disable DLNA Server function. Server Name The default name is the router name. You can change it if needed. Path After storing the files in the USB storage device, please specify a path for the files to be accessed for DLNA service. “/” is the symbol for the top folder of USB storage. OK Save the settings.
Available settings are explained as follows: Item Description Enable Temperature Sensor Enable – Enable the function of temperature sensor. Disable – Disable the function. Display Unit Choose the display unit of the temperature. There are two types for you to choose. Temperature Alert Type the upper limit and lower limit for the system to send out temperature alert. Calibration Type a value used for correcting the temperature error.
4.12 VoIP Note: This function is used for “V” models. Voice over IP network (VoIP) enables you to use your broadband Internet connection to make toll quality voice calls over the Internet. There are many different call signaling protocols, methods by which VoIP devices can talk to each other. The most popular protocols are SIP, MGCP, Megaco and H.323. These protocols are not all compatible with each other (except via a soft-switch server).
Usually there will be two types of calling scenario, as illustrated below: Calling via SIP Servers First, the Vigor V models of yours will have to register to a SIP Registrar by sending registration messages to validate. Then, both parties’ SIP proxies will forward the sequence of messages to caller to establish the session.
4.12.1 DialPlan This page allows you to set phone book and digit map for the VoIP function. Click the Phone Book, Digit Map, Call Barring and Regional links on the page to access into next pages for dialplan settings. 4.12.1.1 Phone Book In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make calls quickly and easily by using “speed-dial” Phone Number. There are total 60 index entries in the phonebook for you to store all your friends and family members’ SIP addresses.
Available settings are explained as follows: Item Description Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0-9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots of SIP URL Address. SIP URL Enter your friend’s SIP account.
Available settings are explained as follows: Item Description Enable Check this box to invoke this setting. Match Prefix The phone number set here is used to add, strip, or replace the OP number. Mode None - No action. Add - When you choose this mode, the OP number will be added with the prefix number for calling out through the specific VoIP interface. Strip - When you choose this mode, the OP number will be deleted by the prefix number for calling out through the specific VoIP interface.
account first to make this interface available. This item will be changed according to the port settings configured in VoIP>> Phone Settings. 4.12.1.3 Call Barring Call barring is used to block phone calls coming from the one that is not welcomed. Click any index number to display the dial plan setup page. Available settings are explained as follows: Item Description Enable Click this to enable this entry.
Barring Type Determine the type of the VoIP phone call, URI/URL or number. Specific URI/URL or Specific Number This field will be changed based on the type you selected for barring Type. Interface All means all the phone calls will be blocked with such mechanism. Additionally, you can set advanced settings for call barring such as Block Anonymous, Block Unknown Domain or Block IP Address. Simply click the relational links to open the web page.
4.12.1.4 Regional This page allows you to process incoming or outgoing phone calls by regional. Default values (common used in most areas) will be shown on this web page. You can change the number based on the region that the router is placed. Available settings are explained as follows: Item Description Enable Regional Check this box to enable this function. Last Call Return [Miss] Sometimes, people might miss some phone calls.
end. Hide caller ID [Deact] Dial the number typed in this field to release this function. Call Waiting [Act] Dial the number typed in this field to make all the incoming calls waiting for your answer. Call Waiting [Deact] Dial the number typed in this field to release this function. 4.12.2 SIP Accounts In this section, you set up your own SIP settings. When you apply for an account, your SIP service provider will give you an Account Name or user name, SIP Registrar, Proxy, and Domain name.
Status Show the status for the corresponding SIP account. R means such account is registered on SIP server successfully. – means the account is failed to register on SIP server. Click any index number to access into the following page. Available settings are explained as follows: Item Description Profile Name Assign a name for this profile for identifying. You can type similar name with the domain. For example, if the domain name is draytel.org, then you might set draytel-1 in this field.
must set the same value in his/her Registrar. Domain/Realm Set the domain name or IP address of the SIP Registrar server. Proxy Set domain name or IP address of SIP proxy server. By the time you can type :port number after the domain name to specify that port as the destination of data transmission (e.g., nat.draytel.org:5065) Act as Outbound Proxy Check this box to make the proxy acting as outbound proxy. Display Name The caller-ID that you want to be displayed on your friend’s screen.
4.12.3 Phone Settings This page allows user to set phone settings for Phone 1 and Phone 2 respectively. However, it changes slightly according to different model you have. Available settings are explained as follows: Item Description Phone List Port – there are two phone ports provided here for you to configure. Phone1/Phone2 allows you to set general settings for PSTN phones. Call Feature – A brief description for call feature will be shown in this field for your reference.
Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. RTP Symmetric RTP – Check this box to invoke the function. To make the data transmission going through on both ends of local router and remote router not misleading due to IP lost (for example, sending data from the public IP of remote router to the private IP of local router), you can check this box to solve this problem.
Detailed Settings for Phone Port Click the number link for Phone port, you can access into the following page for configuring Phone settings. Available settings are explained as follows: Item Description Call Feature Hotline- Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Call Forwarding- There are four options for you to choose. Disable is to close call forwarding function.
notice sound will appear to tell the user new phone call is waiting for your response. Click hook flash to pick up the waiting phone call. Call Transfer- Check this box to invoke this function. Click hook flash to initiate another phone call. When the phone call connection succeeds, hang up the phone. The other two sides can communicate, then. Codecs Prefer Codec- Select one of five codecs as the default for your VoIP calls.
In addition, you can press the Advanced button to configure volume gain, MISC and DTMF mode. Advanced setting is provided for fitting the telecommunication custom for the local area of the router installed. Wrong settings might cause inconvenience for users. Available settings are explained as follows: Item Description Caller ID Type Choose one of the selections as caller ID type.
is very useful when the network traffic congestion occurs and it still can remain the accuracy of DTMF tone. SIP INFO- Choose this one then the Vigor will capture the DTMF tone and transfer it into SIP form. Then it will be sent to the remote end with SIP message. Payload Type (rfc2833) - Choose a number from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. 4.12.
IP or Domain). Elapse The format is represented as hours:minutes:seconds. Tx Pkts Total number of transmitted voice packets during this connection session. Rx Pkts Total number of received voice packets during this connection session. Rx Losts Total number of lost packets during this connection session. Rx Jitter The jitter of received voice packets. In Calls Accumulation for the times of in call. Out Calls Accumulation for the times of out call.
Link-Local Only Link-Local address is used for communicating with neighbouring nodes on the same link. It is defined by the address prefix fe80::/10. You don't need to setup Link-Local address manually for it is generated automatically according to your MAC Address. Available settings are explained as follows: Item Description IPv6 Address The least significant 64 bits are usually chosen as the interface hardware address constructed in modified EUI-64 format.
Static IPv6 This type allows you to setup static IPv6 address for WAN. Available settings are explained as follows: Item Description IPv6 Address Type your IPv6 static IP here. Prefix Length Type your IPv6 address prefix length here. Gateway IPv6 Server Type your IPv6 gateway address here. Primary DNS Server Type your IPv6 primary DNS Server address here. Secondary DNS Server Type your IPv6 secondary DNS Server address here.
Secondary DNS Server Type secondary DNS Server address here DHCPv6 Client (IA_PD) DHCPv6 client mode would use IA_PA option of DHCPv6 protocol to obtain IPv6 prefix from server. Available settings are explained as follows: Item Description SLA Length It is used by an individual organization to create its own local addressing hierarchy and to identify subnets. TSPC Tunnel setup protocol client (TSPC) is an application which could help you to connect to IPv6 network easily.
Available settings are explained as follows: Item Description User Name Type the name obtained from the broker. “Vigor1000” is a default username applied from http://go6.net/4105/register.asp. It is suggested for you to apply another username and password. Password Type the password assigned with the user name. Confirm Password Type the password again to make the confirmation. Tunnel Broker Type the address for the tunnel broker IP, FQDN or an optional port number.
Keepalive Interval Type the time for the interval between two keepalive messages transferring from the client to the broker. Prefix Length Type the required prefix length for the client network. Interface Display LAN interface name. The name of the OS interface that will be configured with the first 64 of the received prefix from the broker and the router advertisement daemon is started to advertise that prefix on the interface.
firewalls and NAT's. Heartbeat – sends a packet to the PoP (Point of Presence, serving IPv6 in IPv4 tunnel), then enables the tunnel on the PoP side. Tunnel ID Vigor1000 Series User’s Guide Each account applied by the user from AICCU service provider supports 2 or more services for IPv4 to IPv6/IPv6 to IPv4 with different tunnel IDs. Simply type tunnel ID characters obtained from AICCU service provider for IPv6 connection. For the default setting, simply use the word “any”.
4.13.2 IPv6 LAN Setup This page defines the IPv6 connection types for LAN interface. Possible types contain DHCPv6 Server and RADVD. Each type requires different parameter settings. Available settings are explained as follows: Item Description LAN IPv6 Configuration IPv6 Address - Type static IPv6 address for LAN. IPv6 Link local Address - It is used for communicating with neighbouring nodes on the same link. It is defined by the address prefix fe80::/10.
4.13.3 IPv6 Firewall Setup This page allows users to set firewall rules for IPv6 packets. Note: Section 4.4 Firewall is configured for IPv4 packets only. Each item is explained as follows: Item Description Name Display the name of the rule. Protocol Display the protocol (TCP/UDP/ICMPv6) the rule uses. Source IP Display the source IP address of such rule. Destination IP Display the destination IP address of such rule. Source Port Display the source port number of such rule.
Available settings are explained as follows: Item Description Name Type a name for the rule. Protocol Specify a protocol for this rule. Source IP Type Determine the IP type as the source. Source IP Type the IP address here if you choose Single as Source IP Type. Source Subnet Type the subnet mask here if you choose Subnet as Source IP Type. Destination IP Type Determine the IP type as the destination. Destination IP Type the IP address here if you choose Single as Destination IP Type.
Item Description Destination Subnet Type the subnet mask here if you choose Subnet as Destination IP Type. Source Start Port Type a value as the source start port. Such value will be available only TCP/UDP is selected as the protocol. Source End Port (optional) Type a value as the source end port. Such value will be available only TCP/UDP is selected as the protocol. Destination Start Port Type a value as the destination start port.
5. Connect PC to http://www.ipv6.org/ with IPv6 IP address again. A message will appear from web page: Welcome to the IPv6 Information Page! You are using IPv4 from 114.37.132.219 4.13.4 IPv6 Routing This page displays the routing table for the protocol of IPv6. Each item is explained as follows: Item Description Device Display the interface name (eth0, eth1, fp, etc..) that used to transfer packets with addresses matching the prefix. Prefix The IPv6 address prefix.
Item Description It is not used by recent kernels, but may be needed by routing daemons. Expires Display the lifetime of the route. MTU Display the largest size (in bytes) of a packet. Advmss Display the largest size (in bytes) of an unfragmented piece of a routing advertisement. Hoplimit Display the number of network segments on which the packet is allowed to travel before discarded. Auto-refresh Check this box to enable an automatic refresh of the page at regular intervals.
4.13.6 IPv6 TSPC Status IPv6 TSPC status web page could help you to diagnose the connection status of TSPC. TSPC log contains some debug information from program. If TSPC has not configured properly, the router will display the following page when the user tries to connect through TSPC connection. When TSPC configuration has been done, the router will start to connect. The connecting page will be shown as below: When the router detects all the information, the screen will be shown as follows.
Each item is explained as follows: Item Description Connection Status It will bring out different pages to represent IPv6 disconnection, connecting and connected. Tunnel Information Display interface name (used to send TSPC prefix), tunnel mode, local endpoint addresses, remote endpoint address, TSPC Prfix, TSPC Prefixlen (prefix length), tunnel broker and so on. Tunnel Status Disconnected - The remote client doesn't connect to the tunnel server.
When your PC obtains the IPv6 address, please connect to http://www.ipv6.org. If your PC access Internet via IPv6 connection, your IPv6 address will be shown on the web page immediately. Refer to the following figure.
4.13.7 IPv6 Management This page allows you to manage the settings for IPv6 access control including settings of HTTP, HTTPs, SSH, FTP and TELNET by using IPv6 protocol. Check the box and type the port number respectively to enable the remote management of services. Available settings are explained as follows: Item Description Allow management from the Internet Enable HTTP/HTTPS/SSH/ICMP Ping/FTP/TELNET -Enable the checkbox to allow system administrators to login from the Internet.
4.14 User 4.14.1 User Configuration This page allows you to set user’s setting that allowed to use PPTP, FTP, IPSEC/L2TP connection. Adding a New User Click Add a New User to open the following page. Available settings are explained as follows: Item Description Enable Check this box to enable such user profile. Username Type a name for this user. Full Name Type full name for this user. Password Type the password for this user. Confirm Password Type the password again for confirmation.
Item Description Allow Disk Sharing Check this box to have the remote user share the disk information. Before enable this function, please install Samba Server first. Allow IPSEC/L2TP Check this box to let the remote user connecting to this device through IPSEC/L2TP. Allow PPTP Check this box to let the remote user connecting to this device through PPTP. z Allowed Dial-In Type Remote Dial-in Client Assign Static IP Address – Check the box and type the IP address.
Editing/Deleting User Settings To edit a user, click the name link under Username to open the following page. Modify the settings except Username and then click OK to save and exit it. If you want to remove such user settings, simply click Delete User. 4.
4.15.1 System Status The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Each item is explained as follows: Item Description Model Display the model name of the router. Firmware Version Display the firmware version of the router. Build Date/Time Display the date and time of the current firmware built.
Wireless MAC Address - Display the MAC address of the wireless LAN. SSID - Display the SSID of the router. Channel Display the channel that wireless LAN used. WAN Connection Mode - Display current connection type used. Link Status - Display the connection status. MAC Address - Display the MAC address of the WAN Interface. IP Address - Display the IP address of the WAN interface. IP Mask - Display the subnet mask address of the WAN interface. IPv6 Address - Display the IPv6 address of the WAN interface.
4.15.2 TR-069 Vigor router with TR-069 is available for matching with VigorACS server. Such page provides VigorACS and CPE settings under TR-069 protocol. All the settings configured here is for CPE to be controlled and managed with VigorACS server. Users need to type URL, username and password for the VigorACS server that such device will be connected. However URL, username and password under CPE client are fixed that users cannot change it. The default CPE username and password are "vigor" and "password".
Item Description VigorACS}:8080/ACSServer/services/UnAuthACSServlet Username/Password - Type username and password for ACS Server for authentication. For example, if you want to use such CPE with VigorACS, you can type as the following: Username: acs Password: password CPE Settings Such information is useful for Auto Configuration Server. Enable – Check the box to allow the CPE Client to connect with Auto Configuration Server. Port – Sometimes, port conflict might be occurred.
4.15.4 User Password This page allows you to set new password for user operation. Available settings are explained as follows Item Description Old Password Type in the old password. The factory default setting for password is blank. New Password Type in new password in this filed. Confirm Password Type in the new password again. When you click OK, the login window will appear. Please use the new password to access into the web configurator again.
4. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. 5. The main screen with User Mode will be shown as follows. Settings to be configured in User Mode will be less than settings in Admin Mode.
4.15.5 Configuration Backup Backup the Configuration Follow the steps below to backup your configuration. 1. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. 2. Type a key arbitrarily for encrypting the file. Keep the key in mind. You will need it whenever you want to restore such file. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. 3.
4. Click Save button, the configuration will download automatically to your computer as a file named config.cfg. The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Restore Configuration 1. Go to System Maintenance >> Configuration Backup.
4.15.6 Syslog/Mail Alert SysLog function is provided for users to monitor the router. There is no bother to directly get into the Web Configurator of the router or borrow debug equipments. Available settings are explained as follows Item Description Syslog Access Setup Enable (Syslog Access…) - Check “Enable” to activate the function of Syslog. Router Name - Assign a name of this device. Server IP Address - The IP address of the Syslog server. Destination Port - Assign a port for the Syslog protocol.
send a test e-mail to the specified e-mail address. SMTP Server - The IP address of the SMTP server. Mail To - Assign a mail address for sending mails out. Mail From - Assign a path for receiving the mail from outside. User Name - Type the user name for authentication. Password - Type the password for authentication. E-mail Alert Event - Check the box of User Login to send alert message to the e-mail box while the router detecting the item(s) you specify here. Click OK to save these settings.
Vigor1000 Series User’s Guide 241
4.15.7 Time and Date It allows you to specify where the time of the router should be inquired from. Available settings are explained as follows Item Description Time Information Current System Time - Display current time in the box. Click Inquire Time to get the current time. Time Configuration Time Zone - Select the time zone where the router is located. Automatically Update Interval - Specify a time interval for the router to update current time.
4.15.8 Management This page allows you to manage the settings for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session. The default value is 5060 and this must match with the peer Registrar when making VoIP calls.
4.15.9 Reboot System The Web Configurator may be used to restart your router for using current configuration. Click Reboot System from System Maintenance to open the following page. Click OK. The router will take 5 seconds to reboot the system. Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. 4.15.
Click Browse.. to locate the newest firmware and click Upgrade. During the process of upgrade, do not turn off your router.
4.16 Diagnostics Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 4.16.1 Ping Click Diagnostics and click Ping to open the web page. It is used to troubleshoot IP connection for your router. Available settings are explained as follows Item Description IPv4 / IPv6 Click IPv4 or IPv6 for performing the ICMP Ping function. IP Address Type in the IP address of the Host/IP that you want to ping.
4.16.2 Trace Route Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run. The result of route trace will be shown on the screen. Available settings are explained as follows Item Description IPv4 / IPv6 Click IPv4 or IPv6 for performing the ICMP Ping function. IP Address / Domain Type in the IP address /domain of the Host/IP that you want to trace.
U - route is up. H - target is a host G - use gateway R - reinstate route for dynamic routing D - dynamically installed by daemon or redirect M - modified from routing daemon or redirect A - installed by addrconf C - cache entry ! - reject route Metric Display the distance to the target (usually counted in hops). Ref Display number of references to this route. (Not used in the Linux kernel.) Use Display count of lookups for the route.
Export Click it to export the log as a text file. Clear Click it to clear the information. Time Display the time of the system log entry. Level Display the severity level of the system log entry. You can specify the level from the drop down list to display the log just for the selected level. Type Display the type or subsystem of the system log entry. You can specify the type from the drop down list to display the log just for the selected type.
4.16.6 Detailed Statistics This page display detailed statistics for WAN/LAN interface. Each item is explained as follows: Item Description WAN/LAN Choose WAN or LAN to display the corresponding statistics. Auto-refresh Check it to enable auto-refresh function. Refresh Click it to reload the page. Clear Click it to clear the counters for all ports. Receive Total Rx Packets - Display the counting number of the packet received. Rx Octets - Display the total received bytes.
Receive Size Counters RX 64 Bytes - Display the number of 64-byte frames in good and bad packets received. RX 65-127 Bytes - Display the number of 65 ~ 127-byte frames in good and bad packets received. RX 128-255 Bytes - Display the number of 128 ~ 255-byte frames in good and bad packets received. RX 256-511 Bytes - Display the number of 256 ~ 511-byte frames in good and bad packets received. RX 512-1023 Bytes - Display the number of 512 ~ 1023-byte frames in good and bad packets received.
Transmit Size Counters Tx 64 Bytes - Display the number of 64-byte frames in good and bad packets transmitted. Tx 65-127 Bytes - Display the number of 65 ~ 127-byte frames in good and bad packets transmitted. Tx 128-255 Bytes - Display the number of 128 ~ 255-byte frames in good and bad packets transmitted. Tx 256-511 Bytes - Display the number of 256 ~ 511-byte frames in good and bad packets transmitted. Tx 512-1023 Bytes - Display the number of 512 ~ 1023-byte frames in good and bad packets transmitted.
Each item is explained as follows: Item Description Auto-refresh Check it to enable auto-refresh function. Refresh Click it to reload the page. Clear Click it to clear the counters for all ports. Type Indicate whether the entry is a static or dynamic entry. VLAN Display the VLAN ID of that entry. MAC Address Display the MAC address of that entry. Port Members Display the port of that entry. 4.16.8 DHCP Table The facility provides information on IP address assignments.
Refresh Click it to reload the page. Computer Name It displays the name of the computer accepted the assigned IP address by this router. IP Address It displays the IP address assigned by this router for specified PC. MAC Address It displays the MAC address for the specified PC that DHCP assigned IP address for it. Expire Time It displays the leased time of the specified PC. 4.16.
TX rate (kbps) Display the transmission speed of the monitored device. RX rate (kbps) Display the receiving speed of the monitored device. Hardware NAT rate Display the data processing rate of the monitored device if hardware NAT is enabled. Sessions Display the session number that you specified in Limit Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock – the device with the IP address will be blocked in five minutes.
The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. 4.16.11 Sessions Table Click Diagnostics and click Sessions Table to open the list page. This page displays the session information for UDP and/or TCP.
Search Click this button to search the information based on the conditions specified. Clear Clear all of the information displayed in this page. 4.16.12 Ports State Click Diagnostics and click Ports State to open the list page. There are for LAN ports and one WAN port in your router. Through this page, you can know which port is using and you can get the detailed statistics for each port by moving and clicking the mouse on the connected one.
This page is left blank.
Trouble Shooting This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Checking if the hardware status is OK or not. z Checking if the network connection settings on your computer are OK or not. z Pinging the router from your computer. z Checking if the ISP settings are OK or not.
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not Sometimes the link failure occurs due to the wrong network connection settings. After trying the above section, if the link is stilled failed, please do the steps listed below to make sure the network connection settings is OK. For Windows The example is based on Windows XP. As to the examples for other operation systems, please refer to the similar steps or find support notes in www.draytek.com. 1.
4. Select Obtain an IP address automatically and Obtain DNS server address automatically. For Mac OS 1. Double click on the current used Mac OS on the desktop. 2. Open the Application folder and get into Network. 3. On the Network screen, select Using DHCP from the drop down list of Configure IPv4.
5.3 Pinging the Router from Your Computer The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most important thing is that the computer will receive a reply from 192.168.1.1. If not, please check the IP address of your computer. We suggest you setting the network connection as get IP automatically. (Please refer to the section 5.2) Please follow the steps below to ping the router correctly.
5.4 Checking If the ISP Settings are OK or Not Open WAN>>Internet Access page and then check whether the ISP settings are set correctly. Use the Connection Type drop down list to choose Static IP/DHCP/PPPoE/PPTP/L2TP/3G USB Modem for reviewing the settings that you configured previously.
5.5 Forcing Vigor Router into TFTP Mode for Performing the Firmware Upgrade 1. Press and hold the Factory Reset button. The system will power off and power on the Vigor Router. 2. Release the Factory Reset button when the ACT LED and its neighbor LED blink simultaneously. There are different LED blinking methods in describing TFTP mode status: Vigor1000: ACT LED & its neighbor LED blink simultaneously. 3. Change your PC IP address to 192.168.1.10. 4.
12. When the firmware upgrade is successful, the following window will pop up.
If the message of Request Timeout. Transfer Abort ! appears, please check if the connection between the computer and the Vigor is active or not. And, if the message of Incorrect/No file name. Transfer Abort ! appears, please check if the firmware you download is correct for your Vigor router. Note: Please turn off the Firewall protection while upgrading the firmware with Windows Vista. The Firewall function can be turned off via Control Panel >> Security Center >> Firewall.
5.6 Backing to Factory Default Setting If Necessary Sometimes, a wrong connection can be improved by returning to the default settings. Try to reset the router by software or hardware. Warning: After pressing factory default setting, you will loose all settings you did before. Make sure you have recorded all useful settings before you pressing. Software Reset You can reset the router to factory default via Web page. Go to System Maintenance and choose Reboot System on the web page.
5.7 Contacting Your Dealer If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com.
