Vigor160 Series 35b/G.Fast Modem User’s Guide (Applicable for Vigor165) Version: 1.0 Firmware Version: V4.0.
Copyrights © All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders. Trademarks The following trademarks are used in this document: Microsoft is a registered trademark of Microsoft Corp. Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are trademarks of Microsoft Corp.
Table of Contents Part I Installation .................................................................................................................i I-1 Introduction ................................................................................................................................... 1 I-1-1 Indicators and Connectors .................................................................................................. 2 I-2 Hardware Installation .................................................
II-2-2 Bind IP to MAC ................................................................................................................. 59 II-3 NAT ............................................................................................................................................ 61 Web User Interface .................................................................................................................... 62 II-3-1 Port Redirection..........................................................
IV-1-3 Administrator Password ................................................................................................ 137 IV-1-4 Configuration Backup.................................................................................................... 138 IV-1-5 Syslog/Mail Alert ........................................................................................................... 141 IV-1-6 Time and Date............................................................................................
VI-4 Pinging the Router from Your Computer ................................................................................ 192 VI-5 Checking If the ISP Settings are OK or Not............................................................................ 194 VI-6 Backing to Factory Default Setting If Necessary .................................................................... 195 VI-7 Contacting DrayTek ..........................................................................................................
Part I Installation This part will introduce Vigor router and guide to install the device in hardware and software.
I-1 Introduction This is a generic International version of the user guide. Specification, compatibility and features vary by region. For specific user guides suitable for your region or product, please contact local distributor. Vigor160 series (family member including Vigor165) is a 35b/G.Fast Modem. As the following figure shown, Vigor160 series supports triple play application like Video, VoIP and Data via the Internet.
I-1-1 Indicators and Connectors Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. LED Status Explanation ACT Off Blinking On The system is not ready or is failed. The system is ready and can work normally. A normal connection is through its corresponding port. LAN is disconnected. Data is transmitting (sending/receiving). DSL connection synchronized. DSL connection is synchronizing.
I-2 Hardware Installation I-2-1 Installing Vigor Router This section will guide you to install the modem through hardware connection and configure the modem’s settings through web browser. Before starting to configure the modem, you have to connect your devices correctly. 1. Connect the DSL interface to the MODEM port of external splitter with a DSL line cable. (splitter) 2. Connect the LAN port to your computer with a RJ-45 cable. 3.
I-2-2 Wall-Mounted Installation Vigor160 series has keyhole type mounting slots on the underside. 1. A template is provided on the Vigor160 series packaging box to enable you to space the screws correctly on the wall. 2. Place the template on the wall and drill the holes according to the recommended instruction. 3. Fit screws into the wall using the appropriate type of wall plug. Note The recommended drill diameter shall be 6.5mm (1/4”). 4.
I-3 Accessing Web Page 1. Make sure your PC connects to the router correctly. You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section - Trouble Shooting of the guide. 2. Open a web browser on your PC and type http://192.168.1.1. The following window will be open to ask for username and password.
4. Now, the Main Screen will appear. Info 5. 6 The home page will be different slightly in accordance with the type of the router you have. The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity.
I-4 Changing Password Please change the password for the original security of the router. 1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. 2. Please type “admin/admin” as Username/Password for accessing into the web user interface with admin mode. 3. Go to System Maintenance page and choose Administrator Password. 4. Enter the login password (the default is “admin”) on the field of Old Password.
I-5 Dashboard The Dashboard (home page) shows the connection status including System Information, IPv4 Internet Access, Interface (physical connection) and Quick Access. I-5-1 Virtual Panel On the top of the Dashboard, a virtual panel (simulating the physical panel of the modem) displays the physical interface connection. It will be refreshed every five seconds. 8 Port Color Displayed Explanation LED Black It means the modem or the function is not working.
I-5-2 Name with a Link A name with a link (e.g., Current Time, WAN1/LAN and etc.) below means you can click it to open the configuration page for modification. I-5-3 Quick Access for Common Used Menu All the menu items can be accessed and arranged orderly on the left side of the main page for your request. However, some important and common used menu items which can be accessed in a quick way just for convenience. Look at the right side of the dashboard.
All of the hosts (including wireless clients) displayed with Host ID, IP Address and MAC address indicates that the traffic would be transmitted through LAN port(s) and then the WAN port. The purpose is to perform the traffic monitor of the host(s). I-5-4 GUI Map All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration.
I-5-6 Config Backup There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup. Simply click the icon on the top of the main screen and a pop up dialog will appear. Click Save to store the setting. I-5-7 Logout Click this icon to exit the web user interface.
Physical Connection for IPv6 Protocol Detailed explanation (for IPv4) is shown below: 12 Item Description LAN Status IP Address-Displays the IP address of the LAN interface. TX Packets-Displays the total transmitted packets at the LAN interface. RX Packets-Displays the total received packets at the LAN interface. Primary DNS-Displays the primary DNS server address for WAN interface. Secondary DNS -Displays the secondary DNS server address for WAN interface.
Item Description TX Rate - Displays the speed of transmitted octets at the WAN interface. RX Packets - Displays the total number of received packets at the WAN interface. RX Rate - Displays the speed of received octets at the WAN interface. Detailed explanation (for IPv6) is shown below: Item Description LAN Status IP Address- Displays the IPv6 address of the LAN interface.. TX Packets-Displays the total transmitted packets at the LAN interface.
I-6 Quick Start Wizard Quick Start Wizard can help you to deploy and use the router easily and quickly. Go to Wizards>>Quick Start Wizard. The first screen of Quick Start Wizard is entering login password. After entering the password, please click Next.
PPPoE 1. Choose WAN1 as WAN Interface and click the Next button; you will get the following page. Choose PPPoE / PPPoA as the protocol. Available settings are explained as follows: Item Description For ADSL Only You have to select an appropriate WAN connection type for connecting to the Internet through this modem according to the settings that your ISP provided. Auto detect – Click it to detect suitable values below by the modem automatically. Encapsulation - Select an IP mode for this WAN interface.
2. IP Address Assign an IP address for the protocol that you select. Subnet Mask Assign a subnet mask value for the protocol of MPoA/Static or Dynamic IP. Default Gateway Assign an IP address to the gateway for the protocol of MPoA/Static or Dynamic IP. Primary DNS Assign an IP address to the primary DNS. Second DNS Assign an IP address to the secondary DNS. VLAN Tag insertion (VDSL2)/(ADSL) The settings configured in this field are available for WAN1 and WAN2.
Confirm Password Retype the password. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. 3. Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet.
MPoA / Static or Dynamic IP 18 1. Choose WAN1 as WAN Interface and click the Next button; you will get the following page. Choose MPoA / Static or Dynamic IP as the protocol. 2. Please enter in the IP address/mask/gateway information originally provided by your ISP. Then click Next for viewing summary of such connection. 3. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 4. Now, you can enjoy surfing on the Internet.
I-7 Registering Vigor Device You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the steps below to finish the router registration. 1 Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. 2 Click Support Area>>Production Registration from the home page.
Info 20 If you haven’t an accessing account, please refer to section Creating an Account for MyVigor to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account. 4 The following page will be displayed after you logging in MyVigor. Type a nickname for the router, then click Add. 5 When the following page appears, your router information has been added to the database. 6 After clicking OK, you will see the following page.
Part II Connectivity It means wide area network. Public IP will be used in WAN. It means local area network. Private IP will be used in LAN. Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP.
II-1 Internet Access It allows users to access Internet. Basics of Internet Protocol (IP) Network IP means Internet Protocol. Every device in an IP-based Network including routers, print server, and host PCs, needs an IP address to identify its location on the network. To avoid address conflicts, IP addresses are publicly registered with the Network Information Centre (NIC).
Web User Interface II-1-1 General Setup This section will introduce some general settings of Internet and explain the connection modes for WAN in details. Available settings are explained as follows: Item Description Display Name Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. DSL Mode Specify which DSL mode can be used for such WAN connection. Auto – The system will choose the suitable one automatically.
VLAN Tag insertion Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the WAN while sending them out. Please type the tag value and specify the priority for the packets sending by WAN interface. Disable – Disable the function of VLAN with tag. Tag value – Type the value as the VLAN ID number. The range is from 0 to 4095. Priority – Type the packet priority number for such VLAN. The range is from 0 to 7.
II-1-2 PPPoE/PPPoA PPPoA, included in RFC1483, can be operated in either Logical Link Control-Subnetwork Access Protocol or VC-Mux mode. As a CPE device, Vigor modem encapsulates the PPP session based for transport across the ADSL loop and your ISP’s Digital Subscriber Line Access Multiplexer (SDLAM). To choose PPPoE or PPPoA as the accessing protocol of the internet, please select PPPoE/PPPoA from the Internet Access menu. The following web page will be shown.
Modulation – Choose a suitable method for PPPoE/PPoA connection. PPPoE Pass-through The modem offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection directly from local clients to your ISP via the Vigor modem. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server. Thus, the PC can access Internet through such direction.
would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog. Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address.
Available settings are explained as follows: Item Description MPoA Click Enable for activating this function. If you click Disable, this function will be closed and all the settings that you adjusted in this page will be invalid. DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your ISP. Multi-PVC channel - The selections displayed here are determined by the page of Internet Access – Multi PVCs.
Ping Gateway IP – If you choose Ping Detect as detection mode, you also can enable this setting to use current WAN gateway IP address for pinging. With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off. TTL (Time to Live) – Set TTL value of PING operation. Ping Interval – Type the interval for the system to execute the PING operation. Ping Retry – Type the number of times that the system is allowed to execute the PING operation before WAN disconnection is judged.
IP Address – Type in the private IP address. Subnet Mask – Type in the subnet mask. Gateway IP Address – Type in gateway IP address. Default MAC Address Type in MAC address for the modem. You can use Default MAC Address or specify another MAC address for your necessity. MAC Address – Type in the MAC address for the modem manually. DNS Server IP Address Type in the primary IP address for the modem. If necessary, type in secondary IP address for necessity in the future.
II-1-4 IPv6 II-1-4-1 Details Page for IPv6 – Offline When Offline is selected, the IPv6 connection will be disabled. II-1-4-2 Details Page for IPv6 – PPP During the procedure of IPv4 PPPoE connection, we can get the IPv6 Link Local Address between the gateway and Vigor router through IPv6CP. Later, use DHCPv6 or accept RA to acquire the IPv6 prefix address (such as: 2001:B010:7300:200::/64) offered by the ISP.
detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. Below shows an example for successful IPv6 connection based on PPP mode. Info At present, the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiwan (hinet), the Netherlands, Australia and UK.
Available settings are explained as follows: Item Description Username Type the name obtained from the broker. It is suggested for you to apply another username and password for http://gogonet.gogo6.com/page/freenet6-account. The maximum length of the name you can set is 63 characters. Password Type the password assigned with the user name. The maximum length of the name you can set is 19 characters. Tunnel Broker Type the address for the tunnel broker IP, FQDN or an optional port number.
II-1-4-4 Details Page for IPv6 – AICCU Available settings are explained as follows: 34 Item Description Always On Check this box to keep the network connection always. Username Type the name obtained from the broker. Please apply new account at http://www.sixxs.net/. It is suggested for you to apply another username and password. The maximum length of the name you can set is 19 characters. Password Type the password assigned with the user name.
the system will check if network connection is established or not, like IPv4 ARP Detect. Always On means no detection will be executed. The network connection will be on always. Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings.
II-1-4-6 Details Page for IPv6 – Static IPv6 This type allows you to setup static IPv6 address for WAN interface. Available settings are explained as follows: 36 Item Description Static IPv6 Address configuration IPv6 Address – Type the IPv6 Static IP Address. Prefix Length – Type the fixed value for prefix length. Add – Click it to add a new entry. Update – Click it to modify an existed entry. Delete – Click it to remove an existed entry.
will be executed. The network connection will be on always. Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. Bridge Mode Enable Bridge Mode - If the function is enabled, the router will work as a bridge modem. After finished the above settings, click OK to save the settings.
be on always. Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode.
II-1-4-8 Details Page for IPv6 – 6rd This type allows you to setup 6rd for WAN interface. Available settings are explained as follows: Item Description 6rd Mode Auto 6rd – Retrieve 6rd prefix automatically from 6rd service provider. The IPv4 WAN must be set as "DHCP". Static 6rd - Set 6rd options manually. IPv4 Border Relay Type the IPv4 addresses of the 6rd Border Relay for a given 6rd domain.
Below shows an example for successful IPv6 connection based on 6rd mode.
II-1-3 Multi-PVC/VLAN Multi-PVC/VLAN allows users to create profiles for specific WAN interface and bridge connections for user applications that require very high network throughput. Simply go to WAN and select Multi-PVC/VLAN. II-1-3-1 General This page shows the basic configurations used by every channel. Available settings are explained as follows: Item Description Channel Display the number of each channel. Channels 1 is used by the Internet Access web user interface and can not be configured here.
Available settings are explained as follows: 42 Item Description Enable Channel 3/4/5 Check it to enable this channel. WAN Type The connections and interfaces created in every channel may select a specific WAN type to be built upon. General Settings VPI - Type in the value provided by your ISP.
VCI - Type in the value provided by your ISP. Protocol - Select a proper protocol for this channel. Encapsulation - Choose a proper type for this channel. The types will be different according to the protocol setting that you choose. Add VLAN Header – Check the box to enable VLAN tag configuration. VLAN Tag – Type the value as the VLAN ID number. Valid settings are in the range from 1 to 4095. The network traffic flowing on each channel will be identified by the system via their VLAN Tags.
IPTV - The IPTV configuration will allow the WAN interface to send IGMP packets to IPTV servers. WAN Connection Detection Such function allows you to verify whether network connection is alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference.
Available settings are explained as follows: Item Description Enable Channel Check it to enable this channel. WAN Type The connections and interfaces created in every channel may select a specific WAN type to be built upon. General Settings VPI - Type in the value provided by your ISP. VCI - Type in the value provided by your ISP. Protocol - Select a proper protocol for this channel. Encapsulation - Choose a proper type for this channel.
configure the same VLAN tag value. Priority – Choose the number to determine the packet priority for such VLAN. The range is from 0 to 7. ATM QoS Such configuration is applied to upstream packets. Such information will be provided by ISP. Please contact with your ISP for detailed information. QoS Type - Select a proper QoS type for the channel. PCR - It represents Peak Cell Rate. The default setting is “0”. SCR - It represents Sustainable Cell Rate. The value of SCR must be smaller than PCR.
Available settings are explained as follows: Item Description QoS Type Select a proper QoS type for the channel. PCR It represents Peak Cell Rate. The default setting is “0”. SCR - It represents Sustainable Cell Rate. The value of SCR must be smaller than PCR. MBS It represents Maximum Burst Size. The range of the value is 10 to 50. PVC to PVC Binding It allows the enabled PVC channel to use the same ADSL connection settings of another PVC channel.
II-2 LAN Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP. The most generic function of Vigor router is NAT. It creates a private subnet of your own. As mentioned previously, the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address.
What is Routing Information Protocol (RIP) Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing. This allows users to change the information of the router such as IP address and the routers will automatically inform for each other.
Web User Interface A LAN comprises a collection of LAN clients, which are networked devices on your premises. A LAN client can be a computer, a printer, a Voice-over-IP (VoIP) phone, a mobile phone, a gaming console, an Internet Protocol Television (IPTV), etc, and can have either a wired (using Ethernet cabling) or wireless (using Wi-Fi) network connection.
II-2-1-1 Details Page for LAN1 – Ethernet TCP/IP and DHCP Setup There are two configuration pages for LAN1, Ethernet TCP/IP and DHCP Setup (based on IPv4) and IPv6 Setup. Click the tab for each type and refer to the following explanations for detailed information. Available settings are explained as follows: Item Description LAN IP Network Configuration For NAT Usage, 1st IP Address - Type in private IP address for connecting to a local private network (Default: 192.168.1.1).
Start IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your modem is 220.135.240.1, the starting IP address must be 220.135.240.2 or greater, but smaller than 220.135.240.254. IP Pool Counts: Enter the number of IP addresses in the pool. The maximum is 10. For example, if you type 3 and the 2nd IP address of your modem is 220.135.240.1, the range of IP address by the DHCP server will be from 220.135.240.2 to 220.
host in the LAN. Relay Agent – (1st subnet/2nd subnet) Specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to. DHCP Server IP Address –Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server. Start IP Address - Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 1st IP address of your modem is 192.168.1.
Private IP addresses can be assigned automatically to LAN clients using Dynamic Host Configuration Protocol (DHCP), or manually assigned. The DHCP server can either be the router (the most common case), or a separate server, that hands out IP addresses to DHCP clients. Alternatively, static IP addresses can be manually configured on LAN clients as part of their network settings. No matter how IP addresses are configured, it is important that no two devices get the same IP address.
It provides 2 daemons for LAN side IPv6 address configuration. One is SLAAC(stateless) and the other is DHCPv6 (Stateful) server. Available settings are explained as follows: Item Description Enable IPv6 Check the box to enable the configuration of LAN 1 IPv6 Setup. WAN Primary Interface Use the drop down list to specify a WAN interface for IPv6. Static IPv6 Address configuration IPv6 Address –Type static IPv6 address for LAN. Prefix Length – Type the fixed value for prefix length.
56 (ULA) configuration assigned to LAN clients. Off - ULA is disabled. Manually ULA Prefix - LAN clients will be assigned ULAs generated based on the prefix manually entered. Auto ULA Prefix - LAN clients will be assigned ULAs using an automatically-determined prefix. Current IPv6 Address Table Display current used IPv6 addresses.
Start IPv6 Address / End IPv6 Address –Type the start and end address for IPv6 server. Advance setting – Click the Edit button to configure advanced IPv6 settings for DHCPv6 server. Advance setting The Advanced Settings page has additional settings for Router Advertisement and enabling multiple WANs for IPv6 traffic. Router Advertisement Configuration – Click Enable to enable router advertisement server.
behind the router when RA (Router Advertisement) packets are transmitted. MTU – It means Max Transmit Unit for packet. If Auto is selected, the router will determine the MTU value for LAN. Extension WAN – In addition to the default WAN used for IPv6 traffic specified in the WAN Primary Interface in the LAN IPv6 Setup page, additional WANs can be selected to carry IPv6 traffic by enabling them in the Extension WAN section.
II-2-2 Bind IP to MAC This function is used to bind the IP and MAC address in LAN to have a strengthening control in network. With the Bind IP to MAC feature you can reserve LAN IP addresses for LAN clients. Each reserved IP address is associated with a Media Access Control (MAC) address. Click LAN and click Bind IP to MAC to open the setup page. Available settings are explained as follows: Item Description Enable Click this radio button to invoke this function.
selected and added to IP Bind List by clicking Add below. Select All Select all entries in the ARP Table for manipulation. Sort Reorder the entry based on the IP address. Refresh Refresh the ARP table listed below to obtain the newest ARP table information. Add / Update to IP Bind List IP Address – Type the IP address to be associated with a MAC address. Mac Address – Type the MAC address of the LAN client’s network interface. Comment – Type a brief description for the entry.
II-3 NAT Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that one or more private IP addresses can be mapped into a single public one. Public IP address is usually assigned by your ISP, for which you may get charged. Private IP addresses are recognized only among internal hosts.
Web User Interface II-3-1 Port Redirection Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc. Most of the case, you need a public IP address for each server and this public IP address/domain name are recognized by all users.
Each item is explained as follows: Item Description Index Display the number of the profile. Enable Check the box to enable the profile. Service Name Display the description of the specific network service. WAN Interface Display the WAN IP address used by the profile. Protocol Display the transport layer protocol (TCP or UDP). Public Port Display the port number which will be redirected to the specified Private IP and Port of the internal host.
Available settings are explained as follows: Item Description Enable Check this box to enable such port redirection setting. Mode Two options (Single and Range) are provided here for you to choose. To set a range for the specific service, select Range. In Range mode, if the public port (start port and end port) and the starting IP of private IP had been entered, the system will calculate and display the ending IP of private IP automatically.
Note that the router has its own built-in services (servers) such as Telnet, HTTP and FTP etc. Since the common port numbers of these services (servers) are all the same, you may need to reset the router in order to avoid confliction. For example, the built-in web user interface in the router is with default port 80, which may conflict with the web server in the local network, http://192.168.1.13:80.
II-3-2 DMZ Host As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port. Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN.
Available settings are explained as follows: Item Description WAN1 Choose Private IP, Active True IP or None first. Private IP Enter the private IP address of the DMZ host, or click Choose IP to select one. Choose IP Click this button and then a window will automatically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network. Select one private IP address in the list to be the DMZ host.
Choose IP Click this button and then a window will automatically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network. Select one private IP address in the list to be the DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the screen. Click OK to save the setting. After finishing all the settings here, please click OK to save the configuration.
II-3-3 Open Ports Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application involved up-to-date to avoid falling victim to any security exploits.
WAN Interface Display the WAN interface used by such index. Aux. WAN IP Display the IP alias setting used by such index. If no IP alias setting exists, such field will not appear. Source IP Display the name of source IP object. Local IP Address Display the private IP address of the local host offering the service. Backup Click it to backup current settings of Open Ports as a file. Restore Click it to restore Open Ports configuration file.
End Port Specify the ending port number of the service offered by the local host. After finishing all the settings here, please click OK to save the configuration. II-3-4 ALG ALG means Application Layer Gateway. There are two methods provided by Vigor router, RTSP (Real Time Streaming Protocol) ALG and SIP (Session Initiation Protocol) ALG, for processing the packets of voice and video.
II-4 Applications Dynamic DNS The ISP often provides you with a dynamic IP address when you connect to the Internet via your ISP. It means that the public IP address assigned to your router changes each time you access the Internet. The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address. It allows the router to update its online WAN IP address mappings on the specified Dynamic DNS server.
Web User Interface II-4-1 Dynamic DNS Enable the Function and Add a Dynamic DNS Account 1. Assume you have a registered domain name from the DDNS provider, say hostname.dyndns.org, and an account with username: test and password: test. 2. Open Applications>>Dynamic DNS. 3. In the DDNS setup menu, check Enable Dynamic DNS Setup. Available settings are explained as follows: Item Description Enable Dynamic DNS Setup Check this box to enable DDNS function.
Domain Name 4. Display the domain name that you set on the setting page of DDNS setup. Select Index number 1 to add an account for the router. Check Enable Dynamic DNS Account, and choose correct Service Provider: dyndns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test.
5. Provider Host Type the IP address or the domain name of the host which provides related service. Note that such option is available when Customized is selected as Service Provider. Service API Type the API information obtained from DDNS server. Note that such option is available when Customized is selected as Service Provider. (e.g: /dynamic/dns/update.asp?u=jo***&p=jo********&hostname=j* ***.changeip.org&ip=###IP### &cmd=update&offline=0) Auth Type Two types can be used for authentication.
II-4-2 Schedule The Vigor router has a built-in clock which can update itself manually or automatically by means of Network Time Protocols (NTP). As a result, you can not only schedule the router to dialup to the Internet at a specified time, but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours, say, business hours. The schedule is also applicable to other functions. You have to set your time before set schedule.
Index Click the index number link to access into the setting page of schedule. Comment Display the name of the time schedule. Time Display the valid time period by time bar. Frequency Display which day(s) will be always on and which day(s) will be always off of the schedule profile by color boxes. - If it lights in green, it means such schedule is active. You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN to LAN settings.
3. Action Specify which action should be applied during the period of the schedule. Force On -Force the connection to be always on. Force Down -Force the connection to be always down. How Often Specify how often the schedule will be applied. Once -The schedule will be applied just once Monthly, on date – The router will only execute the action applied such schedule on the date (1 to 28) of a month. Cycle duration – Type a number as cycle duration.
II-4-3 UPnP The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configuration which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT routers, the major feature of UPnP on the router is “NAT Traversal”. This enables applications inside the firewall to automatically open the ports that they need to pass through a router.
II-4-4 IGMP IGMP is the abbreviation of Internet Group Management Protocol. It is a communication protocol which is mainly used for managing the membership of Internet Protocol multicast groups. II-4-4-1 General Setting Available settings are explained as follows: 80 Item Description IGMP Proxy Check this box to enable this function. The application of multicast will be executed through WAN /PVC/VLAN port. In addition, such function is available in NAT mode.
IGMP Fast Leave Check this box to make the router stop forwarding multicast traffic to a LAN port as soon as it receives a leave message from that port. Each LAN port should have one IGMP host connected. After finishing all the settings here, please click OK to save the configuration. II-4-4-2 Working Status Available settings are explained as follows: Item Description Refresh Click this link to renew the working multicast group status.
Application Notes A-1 How to use DrayDDNS? Vigor router supports various DDNS service providers, user can set up user-defined profile to update the DDNS even the service provider is not on the list. Now, DrayTek starts to support our own DDNS service - DrayDDNS. We will provide a domain name for each Vigor Router, this single domain name can record IP addresses of all WAN. Activate DrayDDNS License 82 1.
3. MyVigor server will reply with the service activation information. Configure DDNS Profile 1. Go to Applications >> Dynamic DNS Setup, a. Tick Enable Dynamic DNS Setup b. Click an available profile index c. Tick Enable Dynamic DNS Account d. Select DrayTek Global (www.drayddns.com) as Service Provider e. Select the WAN you would like to upload the IP to DDNS server f. Click Get domain g.
2. Wait few seconds for router to get the domain name, then, we can click the profile to check the information of license and domain name. Modify Domain Name Currently, only the domain name is allowed to be modified MyVigor website. We will need to register the router to MyVigor server, and log in to MyVigor website to modify it. 1. 2. 84 Please visit https://myvigor.draytek.com/ or go to Applications >> Dynamic DNS Setup >> DrayDDNS profile and click Edit domain.
3. Input the desired Domain name (e.g., XXXX25) and click Update. 4. Vigor router will get the modified domain name when the it performs next DDNS updating. We can click Sync domain to accelerate this process. After few seconds, the router will get the new domain name and print it on the profiles list.
86 Vigor160 Series User’s Guide
A-2 How to Configure Customized DDNS? This article describes how to configure customized DDNS on Vigor routers to update your IP to the DDNS server. We will take “Changeip.org” and “3322.net” as example. Before setting, please make sure that the WAN connection is up. Part A : Changeip.org Note that, Username: jo*** Password: jo******** Host name: j*****.changeip.org WAN IP address: 1.169.185.242 Following is the screenshot of editing the HTML script on the browser to update your IP to the DDNS server.
Now we have to configure the router so it can do the same job for us automatically. 1. Please go to Applications >> Dynamic DNS to create a profile for user-defined DDNS client. 2. Set the Service Provider as User-Defined. 3. Set the Service API as: /dynamic/dns/update.asp?u=jo***&p=jo********&hostname=j****.changeip.org&ip=###IP ### &cmd=update&offline=0 In which, ###IP### is a value which will be replaced with the current interface IP address automatically when DDNS service is running.
To update the IP to the DDNS server via editing the HTML script, we can type the following script on the browser: “good 111.243.178.53” means our IP has been updated to the server successfully. Now we have to configure the router so it can do the same job for us automatically. 1. Please go to Applications >> Dynamic DNS to create a profile for User-Defined DDNS client. 2. Set the Service Provider as User-Defined. 3. Set the Provider Host as member.3322.net. 4.
Part C : Extend Note The customized Service Provider is also eligible with the ClouDNS.net.
II-5 Routing What is Static Route When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other method. You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP. Info Vigor160 Series User’s Guide For more detailed information about using policy route, refer to Support >>FAQ/Application Notes on www.draytek.com.
Web User Interface II-5-1 Static Route Static routing is an alternative to dynamic routing. It is a process that the system network administrator can configure network routers with all the required information for packet forwarding. Go to Routing >> Static Route. The router offers IPv4 and IPv6 for you to configure the static route. Both protocols bring different web pages.
Index The number (1 to 30) under Index allows you to open next page to set up static route. Enable Check the box to enable such route. Destination Address Displays the destination address of the static route. Backup Click it to backup current settings of static route as a file. Restore Click it to restore static route configuration file.
Info 2. There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The first is that the LAN interface can exchange RIP packets with the neighboring routers via the 1st subnet (192.168.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access the Internet via the router, and continuously exchange of IP routing information with different subnets. Click the Routing >> Static Route and click on the Index Number 1. Check the Enable box.
4. Go to Diagnostics and choose Routing Table to verify current routing table. Static Route for IPv6 You can set up to 40 profiles for IPv6 static route.
settings. Viewing IPv6 Routing Table Displays the routing table for your reference. Index The number (1 to 40) under Index allows you to open next page to set up static route. Enable Check the box to enable such static route. Destination Address Displays the destination address of the static route. Backup Click it to backup current settings of static route as a file. Restore Click it to restore static route configuration file. Click any underline of index number to get the following page.
Part III Security While the broadband users demand more bandwidth for multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders. It also restricts users in the local network from accessing the Internet. CSM is an abbreviation of Central Security Management which is used to filter the web content and URL content to reach a goal of security management.
III-1 Firewall While the broadband users demand more bandwidth for multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders. It also restricts users in the local network from accessing the Internet. Furthermore, it can filter out specific packets that trigger the router to build an unwanted outgoing connection.
Stateful Packet Inspection (SPI) Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a packet based on the information in its header, stateful inspection builds up a state machine to track each connection traversing all interfaces of the firewall and makes sure they are valid. The stateful firewall of Vigor router not only examines the header information also monitors the state of the connection.
Web User Interface Below shows the menu items for Firewall. III-1-1 General Setup General Setup allows you to adjust settings of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter. Under some circumstance, your filter set can be linked to work in a serial manner. So here you assign the Start Filter Set only. Also you can configure the Log Flag settings, Apply IP filter to VPN incoming packets, and Accept incoming fragmented UDP packets.
Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Always pass inbound fragmented large packets… Some on-line games (for example: Half Life) will use lots of fragmented UDP packets to transfer game data. Instinctively as a secure firewall, Vigor router will reject these fragmented packets to prevent attack unless you enable “Always pass inbound fragmented large packets…”. By checking this box, you can play these kinds of on-line games.
Default Rule Page Such page allows you to choose filtering profiles including QoS, Load-Balance policy, WCF, APP Enforcement, URL Content Filter, for data transmission via Vigor router. Available settings are explained as follows: 102 Item Description Filter Select Pass or Block for the packets that do not match with the filter rules. Sessions Control The number typed here is the total sessions of the packets that do not match the filter rule configured in this page. The default setting is 60000.
Codepage - This function is used to compare the characters among different languages. Choose correct codepage can help the system obtain correct ASCII after decoding data from URL and enhance the correctness of URL Content Filter. The default value for this setting is ANSI 1252 Latin I. If you do not choose any codepage, no decoding job of URL will be processed. Please use the drop-down list to choose a codepage. If you do not have any idea of choosing suitable codepage, please open Syslog.
III-1-2 Filter Setup Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set number to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule number button to edit each rule. Check Active to enable the rule. Available settings are explained as follows: 104 Item Description Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule.
Action Display the packets to be passed /blocked. CSM Display the content security managed Move Up/Down Use Up or Down link to move the order of the filter rules. Next Filter Set Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. Wizard Mode Allow to configure frequently used settings for filter rule via several setting pages. Advance Mode Allow to configure detailed settings of filter rule.
(!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when the first and last values are different, it indicates that all the ports except the range defined here are available for this service type. (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. 3. Click Next to get the following page.
4. After choosing the mechanism, click Next to get the summary page for reference. 5. If there is no error, click Finish to complete wizard setting.
To use Advance Mode, do the following steps: 1. Click the Advance Mode radio button. 2. Click Index 1 to access into the following page. Available settings are explained as follows: 108 Item Description Enable Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Schedule Profile Set PCs on LAN to work at certain time interval only.
To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Type and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type. From the IP Group drop down list, choose the one that you want to apply. Or use the IP Object drop down list to choose the object that you want.
Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port – (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this service type.
CSM>> URL Content Filter web page first. Or choose [Create New] from the drop down list in this page to create a new profile. For troubleshooting needs, you can specify to record information for URL Content Filter by checking the Log box. It will be sent to Syslog server. Please refer to section Syslog/Mail Alert for more detailed information. Advance Setting Click Edit to open the following window. However, it is strongly recommended to use the default settings here.
small value will be proper. Session timeout–Setting timeout for sessions can make the best utilization of network resources. However, Queue timeout is configured for TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled. 3. When you finish the configuration, please click OK to save and exit this page.
III-1-3 Defense Setup As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. III-1-3-1 DoS Defense Click Firewall and click Defense Setup to open the setup page. Available settings are explained as follows: Item Description Enable Dos Defense Check the box to activate the DoS Defense Functionality. Select All - Click this button to select all the items listed below.
114 Enable UDP flood defense Check the box to activate the UDP flood defense function. Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value, the Vigor router will start to randomly discard the subsequent UDP packets for a period defined in Timeout. The default setting for threshold and timeout are 2000 packets per second and 10 seconds, respectively.
Activating the DoS/DDoS defense functionality might block some legal packets. For example, when you activate the fraggle attack defense, all broadcast UDP packets coming from the Internet are blocked. Therefore, the RIP packets from the Internet might be dropped. Block TCP flag scan Check the box to activate the Block TCP flag scan function. Any TCP packet with anomaly flag setting is dropped. Those scanning activities include no flag scan, FIN without ACK scan, SYN FINscan, Xmas scan and full Xmas scan.
III-1-3-2 Spoofing Defense Open Firewall >> Defense Setup and click Spoofing Defense to open the setup page.
Application Notes A-1 How to Configure Certain Computers Accessing to Internet We can specify certain computers (e.g., 192.168.1.10 ~ 192.168.1.20) accessing to Internet through Vigor router. Others (e.g., 192.168.1.31 and 192.168.1.32) outside the range can get the source from LAN only. The way we can use is to set two rules under Firewall. For Rule 1 of Set 2 under Firewall>>Filter Setup is used as the default setting, we have to create a new rule starting from Filter Rule 2 of Set 2. 1.
3. Check the box of Check to enable the Filter Rule. Type the comments (e.g., block_all). Choose Block If No Further Match for the Filter setting. Then, click OK. Info 118 In default, the router will check the packets starting with Set 2, Filter Rule 2 to Filter Rule 7. If Block If No Further Match for is selected for Filter, the firewall of the router would check the packets with the rules starting from Rule 3 to Rule 7. The packets not matching with the rules will be processed according to Rule 2. 4.
6. A dialog box will be popped up. Choose Range Address as Address Type by using the drop down list. Type 192.168.1.10 in the field of Start IP, and type 192.168.1.20 in the field of End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. 7. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings.
8. Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet.
III-2 Central Security Management (CSM) CSM is an abbreviation of Central Security Management which is used to control URL content to reach a goal of security management. URL Content Filter To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web feature where malicious code may conceal.
Web User Interface III-2-1 URL Content Filter Profile To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web feature where malicious code may conceal. Once a user type in or click on an URL with objectionable keywords, URL keyword blocking facility will decline the HTTP request to that web page thus can limit user’s access to the website.
Profile Display the number of the profile which allows you to click to set different policy. Name Display the name of the URL Content Filter Profile. Administration Message You can type the message manually for your necessity. Default Message - You can type the message manually for your necessity or click this button to get the default message which will be displayed on the field of Administration Message. You can set eight profiles as URL content filter.
the actions executed. For this one, the router will process the packages with the conditions set below for web feature first, then URL second. Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass will be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. URL Access Control Enable URL Access Control - Check the box to activate URL Access Control.
Web Feature Enable Restrict Web Feature - Check this box to make the keyword being blocked or passed. Action - This setting is available only when Either: URL Access Control First or Either: Web Feature First is selected. Pass - Allow accessing into the corresponding webpage with the keywords listed on the box below. Block - Restrict accessing into the corresponding webpage with the keywords listed on the box below.
Application Notes A-1 How to Create an Account for MyVigor The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor. 1. Access into http://myvigor.draytek.com. 2. A login page for MyVigor web site will pop up automatically. 3.
If not, click I am under 16 years old to get the following page. Then, click I and my legal guardian agree. 5. After reading the terms of service/privacy policy, click Agree.
6. In the following page, enter your personal information in this page and then click Continue. 7. Choose proper selection for your computer and click Continue. 8. Now you have created an account successfully. Click START. 9. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com.
10. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login.
11. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password. 12. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want.
Part IV Management There are several items offered for the Vigor router system setup: System Status, TR-069, Administrator Password, User Password, Login Page Greeting, Configuration Backup, Syslog /Mail Alert, Time and Date, Management, Reboot System, Firmware Upgrade and Activation.
IV-1 System Maintenance For the system setup, there are several items that you have to know the way of configuration: System Status, TR-069, Administrator Password, Configuration Backup, Syslog /Mail Alert, Time and Date, Management, Self-Signed Certificate, Panel Control, Reboot System, and Firmware Upgrade. Below shows the menu items for System Maintenance.
Web User Interface VI-1-1 System Status The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Available settings are explained as follows: Item Description Model Name Display the model name of the router. Firmware Version Display the firmware version of the router.
- Display the assigned IP address of the default gateway. IPv6 134 Address - Display the IPv6 address for LAN. Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet.
IV-1-2 TR-069 This device supports TR-069 standard. It is very convenient for an administrator to manage a TR-069 device through an Auto Configuration Server, e.g., VigorACS. Available settings are explained as follows: Item Description TR-069 Click Enable to activate the settings on this page. ACS Server On Choose the interface for the router connecting to ACS server. ACS Server URL/Username/Password – Such data must be typed according to the ACS (Auto Configuration Server) you want to link.
Wizard – Click it to enter the IP address of VigorACS server, port number and the handler. Test With Inform – Click it to send a message based on the event code selection to test if such CPE is able to communicate with VigorACS SI server. Event Code – Use the drop down menu to specify an event to perform the test. Last Inform Response Time – Display the time that VigorACS server made a response while receiving Inform message from CPE last time.
IV-1-3 Administrator Password This page allows you to set new password. Available settings are explained as follows: Item Description Administrator Password Old Password - Type in the old password. The factory default setting for password is “admin”. New Password -Type in new password in this field. The length of the password is limited to 23 characters. Confirm Password -Type in the new password again. Enable ‘admin’ account login to Web UI from the Internet – The default setting is enabled.
IV-1-4 Configuration Backup Such function can be used to apply the router settings configured by Vigor165 to other Vigor device. Backup the Configuration Follow the steps below to backup your configuration. 1. Go to System Maintenance >> Configuration Backup. The following page will be popped-up, as shown below. Available settings are explained as follows: Item Description Restore Choose File – Click it to specify a file to be restored.
3. In Save As dialog, the default filename is config.cfg. You could give it another name by yourself. 4. Click Save button, the configuration will download automatically to your computer as a file named config.cfg. The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Info Backup for Certification must be done independently.
140 2. Click Choose File button to choose the correct configuration file for uploading to the router. 3. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful.
IV-1-5 Syslog/Mail Alert SysLog function is provided for users to monitor router. Available settings are explained as follows: Item Description SysLog Access Setup Enable - Check Enable to activate function of syslog. Syslog Save to – Check Syslog Server to save the log to Syslog server. Check USB Disk to save the log to the attached USB storage disk. Router Name Display the name for such router configured in System Maintenance>>Management.
Mail To - Assign a mail address for sending mails out. Return-Path - Assign a path for receiving the mail from outside. Use SSL - Check this box to use port 465 for SMTP server for some e-mail server uses https as the transmission method. Authentication - Check this box to activate this function while using e-mail application. User Name - Type the user name for authentication. Password - Type the password for authentication.
3. From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router.
IV-1-6 Time and Date It allows you to specify where the time of the router should be inquired from. Available settings are explained as follows: Item Description Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as router’s system time. Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol.
Send NTP Request Through Specify a WAN interface to send NTP request for time synchronization. Click OK to save these settings. IV-1-7 Management This page allows you to manage the settings for Internet/LAN Access Control, Access List from Internet, Management Port Setup, TLS/SSL Encryption Setup, CVM Access Control and Device Management. The management pages for IPv4 and IPv6 protocols are different.
The web user interface will be open until you click the Logout icon manually. 146 Internet Access Control Allow management from the Internet - Enable the checkbox to allow system administrators to login from the Internet. There are several servers provided by the system to allow you managing the router from Internet. Check the box(es) to specify. Disable PING from the Internet - Check the checkbox to reject all PING packets from the Internet. For security issue, this function is enabled by default.
SNMP function. Please type in IPv4 address to specify certain host. Trap Community - Set trap community by typing a proper name. The default setting is public. Notification Host IP - Set the IPv4 address of the host that will receive the trap community. Trap Timeout - The default setting is 10 seconds. TLS/SSL Encryption Setup Enable SSL 3.0 and / or TLS 1.0/1.1/1.2 – Check the box to enable the function of SSL 3.0 and/or TLS 1.0/1.1/1.2 if required.
Control to allow system administrators to login from the Internet. There are several servers provided by the system to allow you managing the router from Internet. Check the box(es) to specify. Disable PING from the Internet - Check the checkbox to disable all PING packets from the Internet. For security issue, this function is enabled by default. Access List You could specify that the system administrator can only login from a specific host or network defined in the list.
certificate), subject alternative name type and relational settings for subject name. Then click GENERATE.
IV-1-9 Panel Control The behavior of the Factory Reset button of the Vigor router can be customized as desired. The Factory Reset is enabled by default and can be enabled or disabled if required. Disabling the Factory Reset button will prevent tampering by unauthorized parties. Click the Button tab to get the following page. Available settings are explained as follows: Item Description Refresh Click to refresh the page to display the latest information.
IV-1-10 Reboot System The Web user interface may be used to restart your router. Click Reboot System from System Maintenance to open the following page. Schedule Profile - You can type in four sets of time schedule for performing system reboot. All the schedules can be set previously in Applications >> Schedule web page and you can use the number that you have set in that web page. If you want to reboot the router using the current configuration, check Using current configuration and click Reboot Now.
IV-1-11 Firmware Upgrade Click System Maintenance>> Firmware Upgrade to proceed to firmware upgrade. Click Select to specify the one you just download. When the above page appears, click Upgrade. The system will upgrade the firmware of the router automatically.
Part V Others Define objects such as IP address, service type, keyword, file extension and others. These pre-defined objects can be applied in CSM.
V-1 Objects Settings Define objects such as IP address, service type, keyword, file extension and others. These pre-defined objects can be applied in CSM.
Web User Interface V-1-1 IP Object For IPs in a range and service ports in a limited range usually will be applied in configuring router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/group that can apply it. For example, all the IPs in the same department can be defined with an IP object (a range of IP address). You can set up to 192 sets of IP Objects with different conditions.
Item Description View Use the drop down list to choose a type (Single Address, Range Address, Subnet Address, Mac Address or all) that IP object with the selected type will be shown on this page. Set to Factory Default Clear all profiles. Search Type a string of the IP object that you want to search. Index Display the profile number that you can configure. Name Display the name of the object profile. Address Display the IP address configured for the object profile.
Select Any Address if this object contains any IP address. Select Mac Address if this object contains Mac address. 3. MAC Address Type the MAC address of the network card which will be controlled. Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Subnet Mask Type the subnet mask if the Subnet Address type is selected.
V-1-2 IP Group This page allows you to bind several IP objects into one IP group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2.
Available settings are explained as follows: 3. Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or Any to display all the available IP objects with the specified interface. Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box. Selected IP Objects Click >> button to add the selected IP objects in this box.
To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: 3. 160 Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Address Type Determine the address type for the IPv6 address. Select Single Address if this object contains one IPv6 address only.
V-1-4 IPv6 Group This page allows you to bind several IPv6 objects into one IPv6 group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2.
Available settings are explained as follows: 3. Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Available IPv6 Objects All the available IPv6 objects with the specified interface chosen above will be shown in this box. Selected IPv6 Objects Click >> button to add the selected IPv6 objects in this box. After finishing all the settings, please click OK to save the configuration.
To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Protocol Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port columns are available for TCP/UDP protocol.
3. After finishing all the settings, please click OK to save the configuration. V-1-6 Service Type Group This page allows you to bind several service types into one group. Available settings are explained as follows: 164 Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile.
To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Group column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: 3. Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Available Service Type Objects All the available service objects that you have added on Objects Setting>>Service Type Object will be shown in this box.
V-1-7 Keyword Object You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Available settings are explained as follows: 166 Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile.
To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: 3. Item Description Name Type a name for this profile, e.g., game. Maximum 15 characters are allowed. Contents Type the content for such profile. For example, type gambling as Contents.
V-1-8 Keyword Group This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL /Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g.
Available settings are explained as follows: Item Description Name Type a name for this group. Maximum 15 characters are allowed. Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects 3. Click this box. button to add the selected Keyword objects in After finishing all the settings, please click OK to save the configuration.
To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Profile column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: 3. 170 Item Description Profile Name Type a name for this profile. The maximum length of the name you can set is 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router.
V-1-10 Objects Backup/Restore All of the objects (or the template) can be exported as a file by clicking Download. Then the user can open the CSV file through Microsoft Excel and modify all the objects at the same time. Simply check the box for the object type that you want to backup. Available settings are explained as follows: Item Description Backup Restore Vigor160 Series User’s Guide Backup the current IP Objects with a CSV file – Click it to backup current IP objecsts as a CSV file.
This page is left blank.
Part VI Troubleshooting This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration.
VI-1 Diagnostics This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. Checking if the hardware status is OK or not. Checking if the network connection settings on your computer are OK or not. Pinging the router from your computer. Checking if the ISP settings are OK or not.
Web User Interface Fisrt, take a look at the menu items under Diagnostics. Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. VI-1-1 Dial-out Triggering Click Diagnostics and click Dial-out Triggering to open the web page. The internet connection (e.g., PPPoE) is triggered by a package sending from the source IP address.
VI-1-2 Routing Table Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: 176 Item Description Refresh Click it to reload the page.
VI-1-3 ARP Cache Table Click Diagnostics and click ARP Cache Table to view the content of the ARP (Address Resolution Protocol) cache held in the router. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Available settings are explained as follows: Item Description Show Specify LAN and VLAN to display related information. In default, this page will display all of the information about LAN and VLAN. Refresh Click it to reload the page.
VI-1-4 IPv6 Neighbour Table The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: 178 Item Description Refresh Click it to reload the page.
VI-1-5 DHCP Table The facility provides information on IP address assignments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Available settings are explained as follows: Item Description Index It displays the connection item number. IP Address It displays the IP address assigned by this router for specified PC.
VI-1-6 NAT Sessions Table Click Diagnostics and click NAT Sessions Table to open the list page. Available settings are explained as follows: 180 Item Description Private IP:Port It indicates the source IP address and port of local PC. #Pseudo Port It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page.
VI-1-7 DNS Cache Table Click Diagnostics and click DNS Cache Table to open the web page. The record of domain Name and the mapping IP address for answering the DNS query from LAN will be stored on Vigor router’s Cache temporarily and displayed on Diagnostics >> DNS Cache Table. Available settings are explained as follows: Item Description Clear Click this link to remove the result on the window. Refresh Click it to reload the page. When an entry’s TTL is larger than….
VI-1-8 Ping Diagnosis Click Diagnostics and click Ping Diagnosis to open the web page. or Available settings are explained as follows: 182 Item Description IPV4 /IPV6 Choose the interface for such function. Ping to Use the drop down list to choose the destination that you want to ping. IP Address Type the IP address of the Host/IP that you want to ping. Ping IPv6 Address Type the IPv6 address that you want to ping. Run Click this button to start the ping work.
VI-1-9 Data Flow Monitor This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Available settings are explained as follows: Item Description Enable Data Flow Monitor Check this box to enable this function.
184 Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock –The device with the IP address will be blocked for five minutes. The remaining time will be shown on the session column. Click it to cancel the IP address blocking. Current /Peak/Speed Current means current transmission rate and receiving rate for WAN interface. Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup.
VI-1-10 Trace Route Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run. The result of route trace will be shown on the screen. or Available settings are explained as follows: Item Description IPv4 / IPv6 Click one of them to display corresponding information for it. Protocol Use the drop down list to choose the protocol that you want to ping through.
Run Click this button to start route tracing work. Clear Click this link to remove the result on the window. VI-1-11 IPv6 TSPC Status IPv6 TSPC status web page could help you to diagnose the connection status of TSPC. If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Available settings are explained as follows: Item Description Refresh Click this link to refresh this page manually.
VI-1-13 DoS Flood Table This page can display content of IP connection detected by DoS Flooding Defense mechanism. It is useful and convenient for network engineers (e.g., MIS engineer) to inspect the network environment to find out if there is any abnormal connection. Information of IP traced and destination port used for SYN Flood, UDP Flood and ICMP Flood attacks will be detected and shown respectively on different pages.
VI-2 Checking If the Hardware Status Is OK or Not Follow the steps below to verify the hardware status. 188 1. Check the power line and WLAN/LAN cable connections. Refer to “I-2 Hardware Installation” for details. 2. Turn on the router. Make sure the Activity LED blink once per second and the correspondent LAN LED is bright. 3. If not, it means that there is something wrong with the hardware status. Simply back to “I-2 Hardware Installation” to execute the hardware installation again.
VI-3 Checking If the Network Connection Settings on Your Computer Is OK or Not Sometimes the link failure occurs due to the wrong network connection settings. After trying the above section, if the link is stilled failed, please do the steps listed below to make sure the network connection settings is OK. For Windows Info The example is based on Windows 7. As to the examples for other operation systems, please refer to the similar steps or find support notes in www.DrayTek.com. 1.
190 4. Select Internet Protocol Version 4 (TCP/IP) and then click Properties. 5. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK.
For Mac OS 1. Double click on the current used Mac OS on the desktop. 2. Open the Application folder and get into Network. 3. On the Network screen, select Using DHCP from the drop down list of Configure IPv4.
VI-4 Pinging the Router from Your Computer The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most important thing is that the computer will receive a reply from 192.168.1.1. If not, please check the IP address of your computer. We suggest you setting the network connection as get IP automatically. (Please refer to the previous section IX-3) Please follow the steps below to ping the router correctly.
Vigor160 Series User’s Guide 193
VI-5 Checking If the ISP Settings are OK or Not If WAN connection cannot be up, check if the LEDs (according to the LED explanations listed on section I-1-1) are correct or not. If the LEDs are off, please: Change the Physical Type from Auto negotiation to other values (e.g., 100M full duplex). Next, check if the LEDs on Vigor router are on or not. If not, please install an additional switch for connecting both Vigor router and the modem offered by ISP.
VI-6 Backing to Factory Default Setting If Necessary Sometimes, a wrong connection can be improved by returning to the default settings. Try to reset the router by software or hardware. Such function is available in Admin Mode only. Info After pressing factory default setting, you will loose all settings you did before. Make sure you have recorded all useful settings before you pressing. The password of factory default is null. Software Reset You can reset the router to factory default via Web page.
VI-7 Contacting DrayTek If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com.
Part IX Telnet Commands Vigor160 Series User’s Guide 197
Accessing Telnet of Vigor Device This chapter also gives you a general description for accessing telnet and describes the firmware versions for the routers explained in this manual. Info For Windows 7 user, please make sure the Windows Features of Telnet Client has been turned on under Control Panel>>Programs. Type cmd and press Enter. The Telnet terminal will be open later. In the following window, type Telnet 192.168.1.1 as below and press Enter.
For users using previous Windows system (e.g., 2000/XP), simply click Start >> Run and type Telnet 192.168.1.1 in the Open box as below. Next, type admin/admin for Account/Password. And, type ? to get a list of valid/common commands.
Telnet Command: adsl txpct /adsl rxpct This command allows the user to adjust the percentage of data transmission for QoS application. Syntax adsl txpct [auto:percent] adsl rxpct [auto:percent] Parameter Description auto It means auto detection of ADSL transmission packet. percent It means to specify the percentage of ADSL transmission packet. Available range is 10-100.
Parameter Description ? Display the command syntax of “adsl ppp”. pvc_no It means the PVC number and the adjustable range is from 0 (Channel-1) to 7(Channel-8). Encap Different numbers represent different modes. 0 : VC_MUX, 1: LLC/SNAP, 2: LLC_Bridge, 3: LLC_Route, 4: VCMUX_Bridge 5: VCMUX_Route, 6: IPoE. Proto It means the protocol used to connect Internet. Different numbers represent different protocols. 0: PPPoA, 1: PPPoE, 2: MPoA. Modu 0: T1.413, 2: G.
Idle timeout:-1 Username=draytek Password=draytek Telnet Command: adsl bridge This command can specify a LAN port (LAN1 to LAN4) for mapping to certain PVC, and the mapping port/PVC will be operated in bridge mode. adsl bridge [pvc_no/status/save/enable/disable] [on/off/clear/tag tag_no] [service type] [px ... ] Syntax Description Parameter Description pvc_no It means pvc number and must be between 0(Channel 1) to 7(Channel 8). status It means to shown the whole bridge status.
> adsl idle %Idle Mode! You has to use {adsl reboot} to restart booting. Telnet Command: adsl drivemode This command is useful for laboratory to measure largest power of data transmission. Please follow the steps below to set adsl drivermode. 1. Please connect dsl line to the DSLAM. 2. Waiting for dsl SHOWTIME. 3. Drop the dsl line. 4. Now, it is on continuous sending mode, and adsl2/2+ led is always ON. 5. Use 'adsl reboot' to restart dsl to normal mode.
Telnet Command: adsl oamlb This command is used to test if the connection between CPE and CO is OK or not. adsl oamlb [n][type] adsl oamlb chklink [on/off] adsl oamlb [log_on/log_off] Syntax Description Parameter Description n It means the total number of transmitted packets. type It means the protocol that you can use. 1 – for F4 Seg-to-Seg (VP level) 2 – for F4 End-to-End (VP level) 4 – for F5 Seg-to-Seg (VC level) 5 – for F5 End-to-End (VC level) chklink Check the DSL connection.
Telnet Command: adsl annex This command can display the annex interface of this router. Example > adsl annex % hardware is annex B. % modem code is annex B; built at 01/15,07:34. Telnet Command: adsl automode This command is used to add or remove ADSL modes (such as ANNEXL, ANNEXM and ANNEXJ) supported by Multimode. adsl automode [add|remove|set|default|show] [adsl_mode] Syntax Description Parameter Description add It means to add ADSL mode. remove It means to remove ADSL mode.
Example > adsl showbins 2 30 ----------------------------------------------------------------------------Bin SNR Gain Bi - Bin SNR Gain Bi - Bin SNR Gain Bi - Bin SNR Gain Bi dB dB ts dB dB ts dB dB ts dB dB ts --- ----- ---- -- - --- ----- ---- -- - --- ----- ---- -- - --- ----- ---- -0 0.0 0.0 0 * 1 0.0 0.0 0 * 2 0.0 0.0 0 * 3 0.0 0.0 0 4 0.0 0.0 0 * 5 0.0 0.0 0 * 6 0.0 0.0 0 * 7 0.0 0.0 8 8 0.0 0.0 10 * 9 0.0 0.0 10 * 10 0.0 0.0 11 * 11 0.0 0.0 11 12 0.0 0.0 11 * 13 0.0 0.0 11 * 14 0.0 0.0 12 * 15 0.0 0.
Telnet Command: adsl femec This command allows you to set FDM or EC mode for wireless setting. It may cause sync problem when change this setting. adsl fdmec [mode] Syntax Description Parameter Description mode Type the value for enabling the specified mode. 0: default (EC) 1: EC 2: FDM Example > adsl fdmec 1 FDM/EC mode: = EC > adsl fdmec 0 FDM/EC mode: = Default Telnet Command: adsl savecfg This command can save the configuration into FLASH with a file format of cfg.
This command can set QoS parameter for ATM. adsl atm pcr [pvc_no][PCR][max][status] adsl atm scr [pvc_no][SCR] adsl atm mbs [pvc_no][MBS] adsl atm status Syntax Description Parameter Description pvc_no It means pvc number and must be between 0(Channel 1) to 7(Channel 8). PCR It means Peak Cell Rate for upstream. The range for the number is “1” to “2539”. max It means to get the highest speed for the upstream. SCR It means Sustainable Cell Rate. MBS It means Maximum Burst Size.
pvc_x It means the PVC number for the source. pvc_y It means the PVC number that the source PVC will be bound to. status Display a table for PVC binding group. -1 It means to clear specific PVC binding. Example > adsl pvcbinding 3 5 set done. bind pvc3 to pvc5. The above example means PVC3 has been bound to PVC5. > adsl pvcbinding 3 -1 clear pvc-1 binding The above example means the PVC3 binding group has been removed. Telnet Command: vdsl status This command is used for display VDSL status.
adsl idle [on | tcpmessage | tcpmessage_off] Syntax Description Parameter Description on tcpmessage Tcpmessage_off Example > vdsl idle ? % Usage : adsl idle [on | tcpmessage | tcpmessage_off] % DSL is under [DISABLE] test mode. % DSL debug tool mode is off. Vigor> vdsl idle on % DSL is under [IDLE/QUIET] test mode. % DSL debug tool mode is off. Telnet Command: vdsl drivermode Note: We can provide prompt support (support@draytek.com) if you refer to the telnet command and have any queries.
> vdsl annex ? % hardware is annex A.
Telnet Command: vdsl showbins This command is used to display each Bin(Tone) SNR, Gain, and Bits allocated. Note: We can provide prompt support (support@draytek.com) if you refer to the telnet command and have any queries. adsl showbins [startbin endbin | up] Syntax Description Parameter Description startbin Available setting: 0 to 4092. endbin Available setting: 4 to 4092. up It is used to display upstream information. The default is downstream.
value bitswap=0~2, sra=0~4 on/off On – Enable the function. Off – Disable the function. Example > Telnet Command: vdsl savecfg This command is used to save the confugration. Note: We can provide prompt support (support@draytek.com) if you refer to the telnet command and have any queries. Example > Vigor> vdsl savecfg ? % Xdsl Cfg Save OK! Telnet Command: vdsl vendorid This command is used to set user defined CPE vender ID. Note: We can provide prompt support (support@draytek.
delta It means SNR margin delta. The range is from -50 to 50. Current ADSL SNR Margin is 0 dB. Example > vdsl snr 25 ADSL SNR update successfully ! Restarting ADSL modem ... Telnet Command: bpa This command allows to configure a network setting specified for Australia’s ISP. bpa m [- | ... ] Syntax Description Parameter Description m Available settings are 1 and 2. -a 1/0 to enable/disable this entry -n contact UserName(max.
Telnet Command: csm appe prof Commands under CSM allow you to set CSM profile to define policy profiles for different policy of IM (Instant Messenger)/P2P (Peer to Peer) application. “csm appe prof “ is used to configure the APP Enforcement Profile name. Such profile will be applied in Default Rule of Firewall>>General Setup for filtering.
Telnet Command: csm appe show It is used to display group (IM/P2P/Protocol and Others) information APP Enforcement Profile. csm appe show [-a|-i|-p|-t|-m] Syntax Description Parameter Description -a View the configuration status for All groups. -i View the configuration status of IM group. -p View the configuration status of P2P group. -t View the configuration status of protocol group. -m View the configuration status of Others group.
OTHERS OTHERS OTHERS OTHERS OTHERS OTHERS OTHERS TUNNEL TUNNEL TUNNEL TUNNEL TUNNEL TUNNEL TUNNEL 78 79 80 81 82 83 84 HTTP Proxy HTTP Tunnel Hamachi Hotspot Shield MS Teredo PGPNet Ping Tunnel Disable Disable Disable Disable Disable Disable Disable . . . -----------------------------------------------------------------Total 66 APPs > Telnet Command: csm appe interface It is used to configure APPE signature download interface.
Telnet Command: csm appe email It is used to set notification e-mail for APPE signature based on the settings configured in System Maintenance>>SysLog/Mail Alert Setup (in which, the box of APPE Signature is checkd under Enable E-Mail Alert). csm appe email [-e|-d|-s] Syntax Description Parameter Description -e Enable notification e-mail mechanism. -d Disable notification e-mail mechanism. -s Send an example e-mail. Example > csm appe email -e Enable APPE email.
VALUE Number 0 to 3 represent different conditions. 0: It means Bundle: Pass. 1: It means Bundle: Block. 2: It means Either: URL Access Control First. 3: It means Either: Web Feature First. -l It means the log type of the profile. They are: P: Pass, B: Block, A: All, N: None uac It means to set URL Access Control part. wf It means to set Web Feature part.
KEY_WORD_Object_Index Specify the index number of the object profile. -g Set the keyword group. KEY_WORD_Group_Index Specify the index number of the group profile. Example > csm ucf obj 1 uac -i E Log:[none] Priority Select : [Bundle : Pass] ----------------------------------------------URL Access Control [ ]Enable URL Access Control Action:[pass] [v]Prevent web access from IP address. No Obj NO. Object Name --- -------- --------------------------------No Grp NO.
Telnet Command: csm ucf obj INDEX wf It means to configure the settings regarding to Web Feature (wf). Syntax csm ucf obj INDEX wf -v csm ucf obj INDEX wf -e csm ucf obj INDEX wf -d csm ucf obj INDEX wf -a P|B csm ucf obj INDEX wf -s WEB_FEATURE csm ucf obj INDEX wf -u WEB_FEATURE csm ucf obj INDEX wf -f File_Extension_Object_index Syntax Description Parameter Description INDEX It means to specify the index number of CSM profile, from 1 to 8.
csm wcf cache csm wcf server WCF_SERVER csm wcf msg MSG csm wcf setdefault csm wcf obj INDEX -v csm wcf obj INDEX -a P|B csm wcf obj INDEX -n PROFILE_NAME csm wcf obj INDEX -l N|P|B|A csm wcf obj INDEX -o KEY_WORD Object Index csm wcf obj INDEX -g KEY_WORD Group Index csm wcf obj INDEX -w E|D|P|B csm wcf obj INDEX -s CATEGORY|WEB_GROUP csm wcf obj INDEX -u CATEGORY|WEB_GROUP Syntax Description 222 Parameter Description show It means to display the web content filter profiles.
P:Pass, B:Block -s It means to choose the items under CATEGORY or WEB_GROUP. -u It means to discard items under CATEGORY or WEB_GROUP.
Example > csm wcf obj 1 -n test_wcf Profile Index: 1 Profile Name:[test_wcf] []White/Black list Action:[block] No Obj NO. Object Name --- -------- --------------------------------No Grp NO.
Parameter Description enable Enable or disable DNS Filter. ON: enable. OFF: disable. syslog Determine the content of records transmitting to Syslog. P: Pass. Records for the packets passing through DNS filter will be sent to Syslog. B: Block. Records for the packets blocked by DNS filter will be sent to Syslog. A: All. Records for the packets passing through or blocked by DNS filter will be sent to Syslog. N: None. No record will be sent to Syslog.
c: clear config and reset to default setting Example > csm dnsf enable ON DNS Filter enable! > csm dns profile_edit 1 -n Plant_1 Profile Index: 1 Profile Name:[Plant_1] Log:[none] WCF Profile Index: 0 UCF Profile Index: 0 Telnet Command: ddns log Displays the DDNS log. Example >ddns log > Telnet Command: ddns time Sets and displays the DDNS time. Syntax ddns time Syntax Description Parameter Description Update in minutes Type the value as DDNS time. The range is from 1 to 14400.
dos [-a | e [ATTACK_F][ATTACK_0] | d [ATTACK_F][ATTACK_0]] Syntax Description Parameter Description -V It means to view the configuration of DoS defense system. -D It means to deactivate the DoS defense system. -A It means to activate the DoS defense system. -s It means to enable the defense function for a specific attack and set its parameter(s). ATTACK_F It means to specify the name of flooding attack(s) or portscan, e.g., synflood, udpflood, icmpflood, or postscan.
n=2: Dynamic IP n=3: Static IP n=4: PPTP with Dynamic IP, n=5: PPTP with Static IP, n=6: L2TP with Dynamic IP n=7: L2TP with Static IP n=A: 3G/4G USB Modem(PPP mode) n=B: 3G/4G USB Modem(DHCP mode 228 -S It means to set ISP Name (max. 23 characters). -P It means to enable PPPoE Service. -u It means to set username (max. 49 characters) for Internet accessing. -p It means to set password (max. 49 characters) for Internet accessing.
-x n Set the second schedule for USB PPP mode. -y n Set the third schedule for USB PPP mode. -z n Set the fourth schedule for USB PPP mode. -Q Set (PPP mode or DHCP mode) WAN Connection Detection Mode. 0: ARP Detect; 1: Ping Detect -I Set (PPP mode or DHCP mode) WAN Connection Detection Ping IP for USB DHCP or PPP mode. = ppp.qqq.rrr.sss: WAN Connection Detection Ping IP -L n Set WAN Connection Detection TTL (1-255) value for USB PPP mode.
Parameter Description Enable Enable the function. Disable Disable the function. Example > ip pubsubnet enable public subnet enabled! Telnet Command: ip pubaddr This command allows to set the IP routed subnet for the router. Syntax ip pubaddr ? ip pubaddr Syntax Description Parameter Description ? Display an IP address which allows users set as the public subnet IP address. public subnet IP address Specify an IP address.
% ip pubmask % Now: 255.255.255.0 > ip pubmask 255.255.0.0 % Set public subnet mask done !!! Telnet Command: ip aux This command is used for configuring WAN IP Alias. Syntax ip aux add [IP] [Join to NAT Pool] ip aux remove [index] Syntax Description Parameter Description add It means to create a new WAN IP address. remove It means to delete an existed WAN IP address. IP It means the auxiliary WAN IP address. Join to NAT Pool 0 (disable) or 1 (enable).
Telnet Command: ip addr This command allows users to set/add a specified LAN IP your router. Syntax ip addr [IP address] Syntax Description Parameter Description IP address It means the LAN IP address. Example >ip addr 192.168.50.1 % Set IP address OK !!! Info When the LAN IP address is changed, the start IP address of DHCP server are still the same.
ip arp setCacheLife [time] In which, arp add allows users to add a new IP address into the ARP table; arp del allows users to remove an IP address; arp flush allows users to clear arp cache; arp status allows users to review current status for the arp table; arp accept allows to accept or reject the source /destination MAC address; arp setCacheLife allows users to configure the duration in which ARP caches can be stored on the system.
ip dhcpc renew [wan number] ip dhcpc status Syntax Description Parameter Description option It is an optional setting for DHCP server. -h: display usage -l: list all custom set DHCP options -d: delete custom dhcp client option by index number -e: enable/disable option feature, 1:enable, 0:disable -w: set WAN number (e.g.
This command allows users to trace the routes from the router to the host. Syntax ip tracert [Host/IP address] [WAN1/WAN2/WAN3] [Udp/Icmp] Syntax Description Parameter Description IP address It means the target IP address. WAN1/WAN2/WAN3 It means the WAN port that the above IP address passes through. Udp/Icmp It means the UDP or ICMP. Example >ip tracert 22.128.2.62 WAN1 Traceroute to 22.128.2.62, 30 hops max 1 172.16.3.7 10ms 2 172.16.1.2 10ms 3 Request Time out. 4 168.95.90.66 50ms 5 211.22.38.
0/1/2 0 means disable; 1 means first subnet and 2 means second subnet. Example > ip rip 1 %% Set RIP LAN1.
Telnet Command: ip wanrip This command allows users to set the RIP (routing information protocol) of WAN IP. Syntax ip wanrip [ifno] -e [0/1] Syntax Description Parameter Description ifno It means the connection interface. 1: WAN1, 3: PVC3,4: PVC4,5: PVC5 Note: PVC3 ~PVC5 are virtual WANs. -e It means to disable or enable RIP setting for specified WAN interface. 1: Enable the function of setting RIP of WAN IP. 0: Disable the function.
Telnet Command: ip route This command allows users to set static route. Syntax ip route add [dst] [netmask][gateway][ifno][rtype] ip route del [dst] [netmask][rtype] ip route status ip route cnc ip route default [off/?] ip route clean [1/0] Syntax Description Parameter Description add It means to add an IP address as static route. del It means to delete specified IP address. dst It means the IP address of the destination. netmask It means the netmask of the specified IP address.
Telnet Command: ip igmp_proxy This command allows users to enable/disable igmp proxy server. Syntax ip igmp_proxy set ip igmp_proxy reset ip igmp_proxy wan ip igmp_proxy query ip igmp_proxy ppp [0/1] ip igmp_proxy status Syntax Description Parameter Description set It means to enable proxy server. reset It means to disable proxy server. wan It means to specify WAN interface for IGMP service. t_home It means to specify t_home proxy server for using.
enable It means to enable igmp snoop function disable It means to disable igmp snoop function. status It means to display current igmp configuration. txquery It means to send out IGMP QUERY to LAN periodically. chkleave It means to check the leave status. On: enable the IGMP snoop leave checking function. Off: it will drop LEAVE if still clients on the same group. separate It means to set IGMP packets being separated by NAT/Bridge. On: The packets will be separated.
Telnet Command: ip dmz Specify MAC address of certain device as the DMZ host. Syntax ip dmz [mac] Syntax Description Parameter Description mac It means the MAC address of the device that you want to specify Example >ip dmz ? % ip dmz , now : 00-00-00-00-00-00 > ip dmz 11-22-33-44-55-66 > ip dmz ? % ip dmz , now : 11-22-33-44-55-66 > Telnet Command: ip dmzswitch This command allows users to set DMZ mode.
ip session timer [num] ip session [block/unblock][IP] ip session [add/del][IP1-IP2][num][p2pnum] Syntax Description Parameter Description on It means to turn on session limit for each IP. off It means to turn off session limit for each IP. default [num] It means to set the default number of session num limit. Defautlp2p [num] It means to set the default number of session num limit for p2p. status It means to display the current settings.
ip bandwidth [add/del] [IP1-IP2][tx][rx][shared] Syntax Description Parameter Description on It means to turn on the IP bandwidth limit. off It means to turn off the IP bandwidth limit. default [tx_rate][rx_rate] It means to set default tx and rx rate of bandwidth limit. The range is from 0 – 65535 Kpbs. status It means to display the current settings. show It means to display all the bandwidth limits settings within the IP range. add It means to add the bandwidth within the IP range.
on It means to turn on IP bandmac policy. Even the IP is not in the policy table, it can still access into network. off It means to turn off all the bindmac policy. strict_on / strict_off It means that only those IP address in IP bindmac policy table can / can not access into network. subnet It means to set LAN subnet to bind strict mode. show It means to display the IP address and MAC address of the pair of binded one. add It means to add one ip bindmac. del It means to delete one ip bindmac.
Telnet Command: ip maxnatuser This command is used to set the maximum number of NAT users. Syntax ip maxnatuser user no Syntax Description Parameter Description User no A number specified here means the total NAT users that Vigor router supports. 0 – It means no limitation. Example > ip maxnatuser 100 % Max NAT user = 100 Telnet Command: ip policy_rt This command is used to set the IP policy route profile. Syntax ip policy_rt [- | ...
Any: It means any port number can be used as destination port. -G [default/specific] Specify the gateway mode. -L [default/specific] Specify the failover gateway mode. -s [value] Indicate the source IP start. Value: The type format shall be “xxx.xxx.xxx.xxx”. (e.g, 192.168.1.0) -S [value] Indicate the source IP end. Value: The type format shall be “xxx.xxx.xxx.xxx”. (e.g, 192.168.1.100) -d [value] Indicate the destination IP start. Value: The type format shall be “xxx.xxx.xxx.xxx”. (e.g, 192.168.2.
-v: View current failback setting. Diagnose for Policy Route -s [value] It means “source IP”. Value: Available settings include: Any: It indicates any IP address can be used as source IP address. “xxx.xxx.xxx.xxx”: The type format (e.g, 192.168.1.0). -d [value] It means “destination IP”. Value : Available settings include: Any: It indicates any IP address can be used as destination IP address. “xxx.xxx.xxx.xxx”: Specify an IP address. -p [value] It means “destination port”.
-i It means to create LAN DNS profile with specified domain name. profile setting index number : type the index number which represents the profile with domain name configured. -l It means to list detailed information of profile configuration. > ip lanDNSRes -l % % Idx: 7 % State: Enable % Profile: DrayTekFTP % Domain Name: ftp.draytek.com % -------- Address Mapping Table -------% Idx ReplyOnlySameSubnet IP Address % 1 Yes 172.16.2.10 % 2 Yes 172.16.3.10 % 3 Yes 172.16.4.
-p Set profile name for LAN DNS. -r Reset the settings for selected profile. Example > % > % > % % % % % > ip dnsforward -i 1 -n ftp.drayTek.com Configure Set1's DomainName:ftp.drayTek.com ip dnsforward -i 1 -a 172.16.1.1 Configure Set1's IP:172.16.1.1 ip dnsforward -i 1 -l Idx: 1 State: Disable Profile: test Domain Name: ftp.drayTek.com DNS Server IP: 172.16.1.1 Telnet Command: ip6 addr This command allows users to set the IPv6 address for your router.
FE80::250:7FFF:FE00:0/64 (Link) Multicast Address: FF02::2 FF02::1:FF00:0 FF02::1 Telnet Command: ip6 dhcp req_opt This command is used to configure option-request settings for DHCPv6 client. Syntax ip6 dhcp req_opt [LAN1 ~LAN4|WAN1|WAN2|USB] [- | ... ] Syntax Description Parameter Description req_opt It means option-request. LAN1~4|WAN1|WAN2|USB It means to specify LAN or WAN interface for such address.
ip6 dhcp client [WAN1|WAN2|USB] [- | ... ] Syntax Description Parameter Description client It means the dhcp client settings. [ |…] The available commands with parameters are listed below. […] means that you can type in several commands in one line. -a It means to show current DHCPv6 status. -p [IAID] It means to request identity association ID for Prefix Delegation. -n [IAID] It means to request identity association ID for Non-temporary Address.
Parameter Description server It means the dhcp server settings. [ |…] The available commands with parameters are listed below. […] means that you can type in several commands in one line. -a It means to show current DHCPv6 status. -b It means to show current DHCPv6 IP Assignment Table. -n It means to set a profile name. -c It means to send rapid commit to server. 1: Enable 0: Disable -e It means to enable or disable the DHCPv6 server.
% % % % DHCPv6 server disabled maximum address of the pool: FF02::3 minimum address of the pool: FF02::1 1st DNS IPv6 Addr: FF02::1 Telnet Command: ip6 internet This command allows you to configure settings for accessing Internet. Syntax ip6 internet [- | ... ] Syntax Description Parameter Description [ |…] The available commands with parameters are listed below. […] means that you can type in several commands in one line.
-p It means to set 6in4 LAN Routed Prefix. -l n It means to set 6in4 LAN Routed Prefix length. -T n It means to set 6in4 Tunnel TTL. TSPC/AICCU -u It means to set Username (max. 63 characters). -P It means to set Password (max. 63 characters). -s It means to set Tunnel Server IP. = IPv4 Addr or URL (max. 63 characters) AICCU -p It means to set Subnet Prefix (AICCU). -l n It means to set Subnet Prefix length (AICCU).
Telnet Command: ip6 neigh This command allows you to display IPv6 neighbour table. Syntax ip6 neigh -s[ inet6_addr] [eth_addr] [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] ip6 neigh -d [inet6_addr] [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] ip6 neigh -a [inet6_addr] [-N LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] Syntax Description Parameter Description -s It means to add a neighbour. -d It means to delete a neighbour. -a It means to show neighbour status. inet6_addr Type an IPv6 address eth_addr Type submask address.
Telnet Command: ip6 pneigh This command allows you to add a proxy neighbour. Syntax ip6 pneigh -s inet6_addr [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] ip6 pneigh -d inet6_addr [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB]] ip6 pneigh -a [inet6_addr] [-N LAN1|LAN2|...|LAN4|WAN1|WAN2|USB]] Syntax Description Parameter Description -s It means to add a proxy neighbour. -d It means to delete a proxy neighbour. -a It means to show proxy neighbour status.
PREFIX/PREFIX-LEN I/F METRIC FLAG NEXT-HOP ------------------------------------------------------------------------::0.0.0.1/128 LAN1 0 U :: FE80::/128 LAN1 0 U :: FE80::21D:AAFF:FE00:0/128 LAN1 0 U :: FE80::/64 LAN1 256 U :: FE80::/16 LAN1 1024 UGS FE80::250:7FFF:FE12:100 FF00::/8 LAN1 256 U :: Telnet Command: ip6 ping This command allows you to pin an IPv6 address or a host. Syntax ip6 ping [IPV6 address/Host] [LAN1|LAN2|...
Telnet Command: ip6 tracert This command allows you to trace the routes from the router to the host. Syntax ip6 tracert [IPV6 address/Host] [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] Syntax Description Parameter Description IPV6 address/Host It means to specify the IPv6 address or host for ping. [LAN1|LAN2|...|LAN4|WAN1 |WAN2|USB] It means to specify LAN or WAN interface for such address.
Status: Connected > Telnet Command: ip6 radvd This command allows you to enable or disable RADVD server. Syntax Ip6 radvd [- | ... ] ip6 radvd –V Syntax Description Parameter Description [ |…] The available commands with parameters are listed below. […] means that you can type in several commands in one line. -s It means to enable or disable the default lifetime of the RADVD server. 1: Enable the RADVD server. 0: Disable the RADVD server.
% % % % % % % min interval time MAX interval time Hop limit MTU Reachable time Retransmit time Preference : : : : : : : 200 seconds 600 seconds 64 0 0 0 Medium Telnet Command: ip6 mngt This command allows you to manage the settings for access list.
Parameter Description [WAN1|WAN2|USB] It means the connection interface.
Parameter Description –h It is used to display the usage of such command. -v It is used to show the NTP state. -p <0/1> It is used to specify NTP server for IPv6. 0 – Auto 1 – First Query IPv6 NTP Server. Example > ip6 ntp -p 1 % Set NTP Priority: IPv6 First Telnet Command: ip6 lan This command allows you to set IPv6 settings for LAN interface. Syntax ip6 lan -l n [- | ... ] Syntax Description Parameter Description –h It is used to display the usage of such command.
-E n It means to delete an extension WAN. n: 1: WAN1 ,2: WAN2, ... x: WANx. -b map It means to set bit map(decimal) for extension WAN. map: bit 0: WAN1 bit 1: WAN2, ... bit n: WAN(n+1). -f n It means to disable IPv6. n= 1: Disable IPv6, n=0: Enable IPv6. -R n It means to enable /disable RIPng. n=1: Enable RIPng, n=0: Disable RIPng. -s n It means to show IPv6 LAN setting. n=0:show all. Default is show all. n=1: LAN1 n=2: LAN2, ... 4: LAN4, n=5: DMZ.
% ULA Type % RIPng : OFF : Enable Telnet Command: ip6 session This command allows you to set sessions limit for IPv6 address. Syntax ip6 session [on/off/default num/status/show] ip6 session [add/del] [IP1-IP2] [num] Syntax Description Parameter Description on It means to turn on session limit for each IP. off It means to turn off session limit for each IP. default It means to set the default number of session num limit. status It means to display the current settings.
default It means to set the default transmission (tx), receiving (rx) rate of bandwidth limit (0-30000 Kbps/Mbps). status It means to display the current settings. show It means to display all IP range bandwidth limit settings. add It means to add the bandwidth limit for an IPv6 range. - Specify a range for IPv6 addresses. del It means to delete the bandwidth limit for an IPv6 range by first IP (IP1) or 'del all'.
Telnet Command: ipf set This command is used to set general rule for firewall. Syntax ipf set [Options] ipf set [SET_NO] rule [RULE_NO] [Options] Syntax Description 266 Parameter Description Options There are several options provided here, such as -v, -c [SET_NO], -d [SET_NO],… and etc. SET_NO It means to specify the index number (from 1 to 12) of filter set. RULE_NO It means to specify the index number (from 1 to 7) of filter rule set. -v Type “-v” to view the configuration of general set.
The value from 0 to 4. 0:None, 1:Class 1, 2:Class 2, 3:Class 3, 4:Default Class Example > ipf set -c 1 #set call filter start from set 1 Setting saved. > ipf set -d 2 #set data filter start from set 2 Setting saved.
268 r Such word means Filter Rule, range from 1~7. The following lists all of the available commands with parameters. -e It means to enable or disable the rule setting. 0- disable 1- enable -D [value] It means to set direction. 0, LAN//DMZ/RT/VPN -> WAN 1, WAN -> LAN/DMZ/RT/VPN 2, LAN/DMZ/RT/VPN -> LAN/DMZ/RT/VPN -s o:g It means to specify source IP object and IP group. o - indicates “object”. g - indicates “group”.
– indicates index number of object or index number of group. Available settings range from 1-96. For example, “-S 0 1" means the first service type object profile. -S u It means to configure advanced settings for Service Type, such as protocol and port range. u – it means “user defined”. – It means TCP(6),UDP(17), TCP/UDP(255). – 1 – Port OP, range is 0-3.
– Available settings range from 0 ~ 8. “0” means no profile will be applied. - Enable (1) the log; disable (0) the log -n It means to specify which DNS filter profile will be applied. – Available settings range from 0 ~ 8. “0” means no profile will be applied. - Enable (1) the log; disable (0) the log -N It means to set number of the next filter set. 0 - 12 -c <0-20> It means to set code page.
Direction Source IP Destination IP Service Type Fragments : : : : : LAN/DMZ/RT/VPN -> WAN Object1, Object2, TCP/UDPObject1, Don't Care Pass or Block : Block Immediately Branch to Other Filter Set: None Max Sessions Limit : 32000 Current Sessions : 0 Mac Bind IP : Non-Strict Qos Class : None APP Enforcement : None URL Content Filter : None WEB Content Filter : None DNS Filter : None Load-Balance policy : Auto-select Log : Enable ---------------------------------------------------------------------CodePage
Available settings include: tcp udp icmp Example >ipf flowtrack set -r Refresh the flowstate ok > ipf flowtrack view -f Start to show the flowtrack sessions state: ORIGIN>> 192.168.1.11:59939 -> 8.8.8.8: 53 REPLY >> 8.8.8.8: 53 -> 192.168.1.11:59939 proto=17, age=93023180(3920), flag=203 ORIGIN>> 192.168.1.11:15073 -> 8.8.8.8: 53 REPLY >> 8.8.8.8: 53 -> 192.168.1.11:15073 proto=17, age=93025100(2000), flag=203 ORIGIN>> 192.168.1.11: 7247 -> 8.8.8.8: 53 REPLY >> 8.8.8.8: 53 -> 192.168.1.
> log -w 25:36:25.580 ---->DHCP (WAN-5) Len = 548XID = 0x7880fdd4 Client IP = 0.0.0.0 Your IP = 0.0.0.0 Next server IP = 0.0.0.0 Relay agent IP = 0.0.0.0 25:36:33.580 ---->DHCP (WAN-5) Len = 548XID = 0x7880fdd4 Client IP = 0.0.0.0 Your IP = 0.0.0.0 Next server IP = 0.0.0.0 Relay agent IP = 0.0.0.0 25:36:41.580 ---->DHCP (WAN-5) Len = 548XID = 0x7880fdd4 Client IP = 0.0.0.0 Your IP = 0.0.0.0 Next server IP = 0.0.0.0 Relay agent IP = 0.0.0.0 25:36:49.
Example > mngt httpport 80 % Set web server port to 80 done. Telnet Command: mngt httpsport This command allows users to set HTTPS port for management. Syntax mngt httpsport [Https port] Syntax Description Parameter Description Https port It means to type the number for HTTPS port. The default setting is 443. Example > mngt httpsport 443 % Set web server port to 443 done. Telnet Command: mngt telnetport This command allows users to set telnet port for management.
% Set ssh port to 23 done. Telnet Command: mngt noping This command is used to pass or block Ping from LAN PC to the internet. Syntax mngt noping [on] mngt noping [off] mngt noping [viewlog] mngt noping [clearlog] Syntax Description Parameter Description on All PING packets will be forwarded from LAN PC to Internet. off All PING packets will be blocked from LAN PC to Internet. viewlog It means to display a log of ping action, including source MAC and source IP.
Example > mngt defenseworm add 21 Add TCP port 21 Block TCP port list: 135, 137, 138, 139, 445, 21 > mngt defenseworm del 21 Delete TCP port 21 Block TCP port list: 135, 137, 138, 139, 445 Telnet Command: mngt rmtcfg This command can allow the system administrators to login from the Internet. By default, it is not allowed.
mngt lanaccess –d mngt lanaccess –v mngt lanaccess –h Syntax Description Parameter Description -e[0/1] It means to enable/disable the function. 0-disable the function. 1-enable the function. -s[value] It means to specify service offered. Available values include: FTP, HTTP, HTTPS, TELNET, SSH, None, All -i[value] It means the interface which is allowed to access. Available values include: LAN2~LAN4, IP Routed Subnet, None, All Note: LAN1 is always allowed for accessing into the router.
Telnet Command: mngt echoicmp This command allows users to reject or accept PING packets from the Internet. Syntax mngt echoicmp [enable] mngt echoicmp [disable] Syntax Description Parameter Description enable It means to accept the echo ICMP packet. disable It means to drop the echo ICMP packet. Example > mngt echoicmp enable %% Echo ICMP packet enabled. Telnet Command: mngt accesslist This command allows you to specify that the system administrator can login from a specific host or network.
This command allows you to configure SNMP for management. Syntax mngt snmp [- | ... ] Syntax Description Parameter Description [ |…] The available commands with parameters are listed below. […] means that you can type in several commands in one line. -e <1/2> 1: Enable the SNMP function. 2: Disable the SNMP function. -g It means to set the name for getting community by typing a proper character. (max.
Parameter Description setdefault It means to return to default settings for all profiles. INDEX It means the index number of the specified object profile. -v It means to view the information of the specified object profile. Example: object ip obj 1 -v -n NAME It means to define a name for the IP object. NAME: Type a name with less than 15 characters. Example: object ip obj 9 -n bruce -i INTERFACE It means to define an interface for the IP object.
object ip grp setdefault object ip grp INDEX -v object ip grp INDEX -n NAME object ip grp INDEX -i INTERFACE object ip grp INDEX -a IP_OBJ_INDEX Syntax Description Parameter Description setdefault It means to return to default settings for all profiles. INDEX It means the index number of the specified group profile. -v It means to view the information of the specified group profile. Example: object ip grp 1 -v -n NAME It means to define a name for the IP group.
[2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] [8:][0] [9:][0] [10:][0] [11:][0] Set ok! 282 Vigo160 Series User’s Guide
Telnet Command: object ipv6 obj This comman is used to create an IPv6 object profile. Syntax obj ipv6 obj setdefault obj ipv6 obj INDEX -v obj ipv6 obj INDEX -n NAME obj ipv6 obj INDEX -s INVERT obj ipv6 obj INDEX -e MATCH_TYPE obj ipv6 obj INDEX -a TYPE [START_IP] [END_IP]|[Prefix Length] Syntax Description Parameter Description setdefault It means to return to default settings for all profiles. INDEX It means the index number of the specified object profile.
> obj ipv6 obj 3 -e 1 You can not set 64 bits Interface ID for Subnet type. Setting saved. > obj ipv6 obj 3 -a 3 2607:f0d0:1002:51::4 2607:f0d0:1002:51::4 Setting saved.
[3:][0] [4:][0] [5:][0] [6:][0] [7:][0] > object ipv6 grp 8 -a 1 2 3 4 5 IPv6 Group Profile 8 Name :[bruce] Included ip object index: [0:][1] [1:][2] [2:][3] [3:][4] [4:][5] [5:][0] [6:][0] [7:][0] Telnet Command: object service obj This command is used to create service object profile.
0=equal(=), when the starting port and ending port values are the same, it indicates one port; when the starting port and ending port values are different, it indicates a range for the port and available for this service type.
NAME: Type a name with less than 15 characters. Example: object service grp 8 –n bruce -a SER_OBJ_INDEX It means to specify service object profiles for the group profile. Example: :object service grp 3 –a 1 2 3 4 5 The service object profiles with index number 1,2,3,4 and 5 will be group under such profile.
Show It means to show the contents for all of the profiles. INDEX It means the index number of the specified keyword profile. -v It means to view the information of the specified keyword profile. -n NAME It means to define a name for the keyword profile. NAME: Type a name with less than 15 characters. -a CONTENTS It means to set the contents for the keyword profile. Example: object kw obj 40 –a test -c It means to clear the contents of keyword object profile.
CATEGORY|FILE_EXTENSION CATEGORY: Image, Video, Audio, Java, ActiveX, Compression, Executation Example: object fe obj 1 -e Image FILE_EXTENSION: ".bmp", ".dib", ".gif", ".jpeg", ".jpg", ".jpg2", ".jp2", ".pct", ".pcx", ".pic", ".pict", ".png", ".tif", ".tiff", ".asf", ".avi", ".mov", ".mpe", ".mpeg", ".mpg", ".mp4", ".qt", ".rm", ".wmv", ".3gp", ".3gpp", ".3gpp2", ".3g2", ".flv", ".swf", ".aac", ".aiff" ".au", ".mp3", ".m4a", ".m4p", ".ogg", ".ra", ".ram", ".vox", ".wav", ".wma", ".class", ".jad", ".
Telnet Command: object sms This command is used to create short message object profile. Syntax object sms show object sms setdefault object sms obj INDEX -v object sms obj INDEX -n NAME object sms obj INDEX -s Service Provider object sms obj INDEX -u Username object sms obj INDEX -p Password object sms obj INDEX -q Quota object sms obj INDEX -i Interval object sms obj INDEX -l URL Syntax Description 290 Parameter show It means to show the contents for all of the profiles.
Note that one credit equals to one SMS text message on the standard route. -I [Interval] It means to set the sending interval for the SMS to be delivered. Type the shortest time interval for the system to send SMS. -l [URL] It means to set the URL of SMS object profile 9 and 10.
Profile Name: Type a name with less than 15 characters. -s [SMTP Server] It means to set the IP address of the mail server. -l [Use SSL] It means to use port 465 for SMTP server for some e-mail server uses https as the transmission method. 0 – disable 1 – enable to use the port number. -m [SMTP Port] It means to set the port number for SMTP server. -a [Sender Address] It means to set the e-mail address (e.g., johnwash@abc.com.tw) of the sender.
Syntax Description Parameter show It means to show the contents for all of the profiles. Description setdefault It means to return to default settings for all profiles. [INDEX] It means the index number (from 1 to 8) of the specified notification object profile. -v It means to view the information of the specified notification object profile. -n [Profile Name] It means to define a name for the notification object profile. Profile Name: Type a name with less than 15 characters.
object schedule set [INDEX] option object schedule view [INDEX] object schedule setdefault Syntax Description Parameter set 294 Description It means to set the schedule profile. [INDEX] It means the index number (from 1 to 15) of the specified object profile. option Available options for schedule includes: -e , -c, -D, -T, -d, -a -e [value] It means to enable the schedule setup. 0 – disable 1 – enable -c [comment] It means to set brief description for the specified profile.
> object schedule set 1 -h 3 10" view [INDEX] It means to show the content of the profile. setdefault It means to return to default settings for all profiles. Example > object schedule > object schedule > object schedule > object schedule > object schedule > object schedule > object schedule > object schedule Index No.
wan1 It means the WAN1 interface. AN… 10H It means the physical type for the specific port. AN: auto-negotiate. 1000F: 1000M Full Duplex. 100F: 100M Full Duplex. 100H: 100M Half Duplex. 10F: 10M Full Duplex. 10H: 10M Half Duplex. status It means to view the Ethernet port status. wanfc It means to set WAN flow control.
TCP WWW Timeout: 60 sec. TCP SYN Timeout: 60 sec. Telnet Command: qos setup This command allows user to set general settings for QoS. Syntax qos setup [- | ... ] Syntax Description Parameter Description [ |…] The available commands with parameters are listed below. […] means that you can type in several commands in one line. -h Type it to display the usage of this command.
> qos setup -m 3 -i 9500 -o 8500 -r 3:20 -u 1 -p 50 -t 1 WAN1 QOS mode is both Wan 1 is XDSL model ,don,t need to set up Wan 1 is XDSL model ,don,t need to set up WAN1 class 3 ratio set to 20 WAN1 udp bandwidth control set to enable WAN1 udp bandwidth limit ratio set to 50 WAN1 Outbound TCP ACK Prioritizel set to enable QoS WAN1 set complete; restart QoS > Telnet Command: qos class This command allows user to set QoS class. Syntax qos class -c [no] –[a|e|d] [no][- | ...
addr1:subnet – It means the subnet address with start IP address. Please type the subnet and the IP address, for example, “-l 172.16.3.9:255.255.0.0”.0 any – It means Any address. Simple type “-l” to specify any address for this command. -p Specify the ID. -s Specify the service type by typing the number. The available types are listed as below: 1:ANY 2:DNS 3:FTP 4:GRE 5:H.
Telnet Command: qos type This command allows user to configure protocol type and port number for QoS. Syntax qos type [-a | -e | -d ]. Syntax Description Parameter Description -a It means to add rule. -e It means to edit user defined service type. “no” means the index number. Available numbers are 1~40. -d It means to delete user defined service type. “no” means the index number. Available numbers are 1~40. -n It means the name of the service.
Telnet Command: quit This command can exit the telnet command screen. Telnet Command: show lan This command displays current status of LAN IP address settings. Example > show lan The LAN settings: Status IP Mask DHCP Start IP Pool Gateway -------- --------------- --------------- ---- --------------- ---- -[V]LAN1 192.168.1.1 255.255.255.0 V 192.168.1.10 200 192.168.1.1 [X]LAN2 192.168.2.1 255.255.255.0 V 192.168.2.10 100 192.168.2.1 [X]LAN3 192.168.3.1 255.255.255.0 V 192.168.3.10 100 192.168.3.
Telnet Command: show dns This command displays current status of DNS setting. Example > show dns %% Domain name server settings: % LAN1 Primary DNS: [Not set] % LAN1 Secondary DNS: [Not set] % LAN2 Primary DNS: [Not set] % LAN2 Secondary DNS: [Not set] % LAN3 Primary DNS: [Not set] % LAN3 Secondary DNS: [Not set] % LAN4 Primary DNS: [Not set] % LAN4 Secondary DNS: [Not set] Telnet Command: show openport This command displays current status of open port setting.
Telnet Command: show nat This command displays current status of NAT. Example > show nat Port Redirection Running Table: Index Protocol Public Port Private IP Private Port 1 0 0 0.0.0.0 0 2 0 0 0.0.0.0 0 3 0 0 0.0.0.0 0 4 0 0 0.0.0.0 0 5 0 0 0.0.0.0 0 6 0 0 0.0.0.0 0 7 0 0 0.0.0.0 0 8 0 0 0.0.0.0 0 9 0 0 0.0.0.0 0 10 0 0 0.0.0.0 0 11 0 0 0.0.0.0 0 12 0 0 0.0.0.0 0 13 0 0 0.0.0.0 0 14 0 0 0.0.0.0 0 15 0 0 0.0.0.0 0 16 0 0 0.0.0.0 0 17 0 0 0.0.0.0 0 18 0 0 0.0.0.0 0 19 0 0 0.0.0.0 0 20 0 0 0.0.0.
Telnet Command: show session This command displays current status of current session. Example > % % % % % % show session Maximum Session Number: 30000 Maximum Session Usage: 0 Current Session Usage: 0 Current Session Used(include waiting for free): 0 WAN1 Current Session Usage: 0 WAN3 Current Session Usage: 0 Telnet Command: show status This command displays current status of LAN and WAN connections. Example > show status System Uptime:25:40:53 LAN Status Primary DNS:8.8.8.8 IP Address:192.168.1.
Telnet Command: show traffic This comman can display traffic graph for WAN1, transmitted bytes, receivied bytes and sessions.
306 Vigo160 Series User’s Guide
Telnet Command: srv dhcp dhcp2 This command is used to enable DCHP2 server. Syntax srv dhcp dhcp2 [- | ... ] Syntax Description Parameter Description [ |…] The available commands with parameters are listed below. […] means that you can type in several commands in one line. -l It menas to enable the LAN port to public DHCP. 0: Disenable 1: Enable -m It menas to enable MAC address to public DHCP.
cnt It means the IP count number. IP counts It means to specify the number of IP addresses in the pool. The maximum is 10. status It means the execution result of this command. add It means creating a list of hosts to be assigned. del It means removing the selected MAC address. MAC Addr It means to specify MAC Address of the host. all/ALL It means all of the MAC addresses. Example > ip route add 192.168.1.56 255.255.255.0 192.168.1.
Telnet Command: srv dhcp dns2 This command allows users to set Secondary IP Address for DNS Server in LAN. Syntax srv dhcp dns2 [?] srv dhcp dns2 [LAN1/LAN2/LAN3/LAN4][DNS IP address] Syntax Description Parameter Description ? It means to display current IP address of DNS 2 for the DHCP server. LAN1/LAN2/LAN3/LAN4 It means to specify the LAN interface. DNS IP address It means the IP address that you want to use as DNS2. Note: The IP Routed Subnet DNS must be the same as NAT Subnet DNS).
Telnet Command: srv dhcp gateway This command allows users to specify gateway address for DHCP server. Syntax srv dhcp gateway [?] srv dhcp gateway [Gateway IP] Syntax Description Parameter Description ? It means to display current gateway that you can use. Gateway IP It means to specify a gateway address used for DHCP server. Example > srv dhcp gateway 192.168.2.1 This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router.
Syntax Description Parameter Description server ip It means the IP address that you want to used as DHCP server. Index It means subnet 1 or 2. Please type 1 or 2. The router will invoke this function according to the subnet 1 or 2 specified here. Example > > > % % srv dhcp relay servip srv dhcp relay subnet srv dhcp relay servip srv dhcp relay servip Now: 192.168.1.46 192.168.1.
Telnet Command: srv dhcp leasetime This command can set the lease time for the DHCP server. Syntax srv dhcp leasetime [?] srv dhcp leasetime [Lease Time (sec)] Syntax Description Parameter Description ? It means to display current leasetime used for the DHCP server. Lease Time (sec) It means the lease time that DHCP server can use. The unit is second. Example > srv dhcp leasetime ? % srv dhcp leasetime
Telnet Command: srv dhcp primWINS This command can set the primary IP address for the DHCP server. Syntax srv dhcp primWINS [WINS IP address] srv dhcp primWINS clear Syntax Description Parameter Description WINS IP address It means the IP address of primary WINS server. clear It means to remove the IP address settings of primary WINS server. Example > srv dhcp primWINS 192.168.1.88 > srv dhcp primWINS ? %% srv dhcp primWINS %% srv dhcp primWINS clear % Now: 192.168.1.
Telnet Command: srv dhcp expRecycleIP This command can set the time to check if the IP address can be assigned again by DHCP server or not. Syntax srv dhcp expRecycleIP Syntax Description Parameter Description sec time It means to set the time (5~300 seconds) for checking if the IP can be assigned again or not. Example > srv dhcp expRecycleIP 250 % DHCP expRecycleIP = 250 Telnet Command: srv dhcp tftp This command can set the TFTP server as the DHCP server.
Telnet Command: srv dhcp option This command can set the custom option for the DHCP server.
Telnet Command: srv nat dmz This command allows users to set DMZ host. Before using this command, please set WAN IP Alias first. Syntax srv nat dmz n m [- | … ] Syntax Description Parameter Description n It means to map selected WAN IP to certain host. 1: wan1 m [index] It means the index number (1 ~ 32) of the DMZ host. Default setting is “1” (WAN 1). It is only available for Static IP mode. If you use other mode, you can set in this field.
port (500) preservation. status It means to display current status for checking. Example > srv nat ipsecpass status %% Status: IPsec ESP pass-thru and IKE src_port:500 preservation is OFF. Telnet Command: srv nat openport This command allows users to set open port settings for NAT server. Syntax srv nat openport n m [- | … ] Syntax Description Parameter Description n It means the index number for the profiles. The range is from 1 to 40.
> srv nat openport 1 1 -v %% Status: Enable %% Comment: games %% WAN Interface: WAN1 %% Private IP address: 192.168.1.56 Index Protocal Start Port End Port ***************************************************************** 1. TCP 23 83 2. TCP/UDP 0 0 3. TCP/UDP 0 0 4. TCP/UDP 0 0 5. TCP/UDP 0 0 6. TCP/UDP 0 0 7. TCP/UDP 0 0 8. TCP/UDP 0 0 9. TCP/UDP 0 0 10. TCP/UDP 0 0 > Telnet Command: srv nat portmap This command allows users to set port redirection table for NAT server.
table It means to display Port Redirection Configuration Table. Example > srv nat portmap add 1 name tcp 100 0 192.168.1.10 200 wan1 1 > srv nat portmap table NAT Port Redirection Configuration Table: Index Service Name 1 game 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 Protocol Public Port Private IP 6 80 192.168.1.
12 13 14 15 16 17 18 19 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0 0 0 0 0 0 0 0 20 0 0 0.0.0.0 0 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- Telnet Command: srv nat trigger This command allows users to set port setting for triggering or return to factory default settings of port. Syntax srv nat trigger setdefault srv nat trigger view srv nat trigger n [- | ...
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Telnet Command: srv nat showall This command allows users to view a summary of NAT port redirection setting, open port and DMZ settings. Example > srv nat showall Index Proto WAN IP:Port Private IP:Port Act ************************************************************************* **** R01 TCP 0.0.0.0:100 192.168.1.
option The available commands with parameters are listed below. cmd acc traffic [on/off/status/tx/rx] cmd It means to send command to the client. acc It means to set the client authentication account and password. traffic [on/off/status/tx/rx] It means to turn on/off or display the data transmission from the client. Example > switch -i 1 traffic on External Device NO.
This command is used to turn off the auto discovery for external devices. Example > switch off Disable External Device auto discovery! Telnet Command: switch list This command is used to display the connection status of the switch. Example > switch list No. Mac IP status Dur Time Model_Name -------------------------------------------------------------------------[1] 00-50-7f-cd-07-48 192.168.1.
This command is used to create user account and specify LDAP server. The server will authenticate the local user who wants to access into the web user interface of Vigor router. Syntax sys adminuser [option] sys adminuser edit [index] username password Syntax Description Parameter Description option Available options includes: Local [0-1] edit [INDEX] delete [INDEX] view [INDEX] Local [0-1] 0 – Disable the local user. 1 – Enable the local user.
> sys board button def on > default button is on now. Telnet Command: sys cfg This command reset the router with factory default settings. When a user types this command, all the configuration will be reset to default setting. Syntax sys cfg default sys cfg status Syntax Description Parameter Description default It means to reset current settings with default values. status It means to display current profile version and status. Example > sys cfg status Profile version: 3.0.
on It means to turn on the FTP server of the system. off It means to turn off the FTP server of the system. Example > sys ftpd on % sys ftpd turn on !!! Telnet Command: sys domainname This command can set and remove the domain name of the system when DHCP mode is selected for WAN. Syntax sys domainname [wan1] [Domain Name Suffix] sys domainname [wan1] clear Syntax Description Parameter Description wan1 It means to specify WAN interface for assigning a name for it.
MAC: 00-50-7F-00-00-03 Interface 6 Ethernet: Status: DOWN IP Address: 0.0.0.0 MAC: 00-50-7F-00-00-04 Interface 7 Ethernet: Status: DOWN IP Address: 0.0.0.0 MAC: 00-50-7F-00-00-05 Interface 8 Ethernet: Status: DOWN IP Address: 0.0.0.0 MAC: 00-50-7F-00-00-06 --- MORE --> Netmask: 0x00000000 Netmask: 0x00000000 Netmask: 0x00000000 ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- Telnet Command: sys name This command can set and remove the name for the router when DHCP mode is selected for WAN.
Telnet Command: sys passwd This command allows users to set password for the administrator. sys passwd [old password] [new passoword: ASCII string] Syntax Description Parameter Description old password It means the old password for administrator. new passoword: ASCII string It means the password for administrator. The maximum character that you can set is 83.
> sys commit > Telnet Command: sys tftpd This command can turn on TFTP server for upgrading the firmware. Example > sys tftpd % TFTP server enabled !!! Telnet Command: sys version This command can display current version for the system. Example > sys version Router Model: Vigor160ac Version: 3.8.5_RC4a English Profile version: 3.0.0 Status: 1 (0x4845af2c) Router IP: 192.168.1.1 Netmask: 255.255.255.
Syntax sys pollbuf [on] sys pollbuf [off] Syntax Description Parameter Description on It means to turn on pulling buffer. off It means to turn off pulling buffer. Example > sys pollbuf on % Buffer polling is on! > sys pollbuf off % Buffer polling is off! Telnet Command: sys britask This command can improve triple play quality. Syntax sys britask [on] sys britask [off] Syntax Description Parameter Description on It means to turn on the bridge task for improving the triple play quality.
Telnet Command: sys tr069 This command can set CPE settings for applying in VigorACS. Syntax sys tr069 get [parm] [option] sys tr069 set [parm] [value] sys tr069 getnoti [parm] sys tr069 setnoti [parm] [value] sys tr069 log sys tr069 debug [on/off] sys tr069 save sys tr069 inform [event code] sys tr069 port [port num] sys tr069 cert_auth [on/off] Syntax Description Parameter Description get [parm] [option] It means to get parameters for tr-069.
Total content length of parameter is 915 InternetGatewayDevice.LANDeviceNumberOfEntries InternetGatewayDevice.WANDeviceNumberOfEntries InternetGatewayDevice.DeviceInfo. InternetGatewayDevice.ManagementServer. InternetGatewayDevice.Time. InternetGatewayDevice.Layer3Forwarding. InternetGatewayDevice.LANDevice. InternetGatewayDevice.WANDevice. InternetGatewayDevice.Services. InternetGatewayDevice.X_00507F_InternetAcc. InternetGatewayDevice.X_00507F_LAN. InternetGatewayDevice.X_00507F_NAT.
Parameter Description [|… ] The available commands with parameters are listed below. […] means that you can type in several commands in one line. -p 0/1 Set the listening port (1~65535) for SIP ALG. -u 0/1 Enable (1) or disable (0) the listening along UDP path. -t 0/1 Enable (1) or disable (0) the listening along TCP path.
-Max RTSP session num: 256 -Remain RTSP session num: 256 Telnet Command: sys license This command can process the system license. Syntax sys license licmsg sys license licauth sys license regser sys license licera sys license licifno sys license lic_wiz [set/reg/qry] sys license trigger [-e/-d/-s] sys license dev_chg sys license dev_key Syntax Description Parameter Description licmsg It means to display license message. licauth It means the license authentication time setting.
> sys license lic_trigger -e Trigger the license to update, value=1 > sys license lic_trigger -d Don't trigger the license to update, value=0 > sys license lic_trigger -s License update state=0 (0:disable, 1:enable) Telnet Command: sys daylightsave This command is used to configure daylight save setting. Syntax sys daylightsave [- | ... ] Syntax Description Parameter Description [|… ] The available commands with parameters are listed below.
Example > sys daylightsave -y 9 1 0 14 % Start: Yearly on Sep 1th Sun 14:00 Telnet Command: sys dnsCacheTbl This command is used to configure TTL settings which will be displayed in DNS Cache table. Syntax sys dnsCacheTbl [|…] Syntax Description Parameter Description [|… ] The available commands with parameters are listed below. […] means that you can type in several commands in one line. -l Display DNS IPv4 entry in the DNS cache table.
-m <1/0> Enable (1) or disable (0) Mail Syslog. -f <1/0> Enable (1) or disable (0) Filewall Log. -v <1/0> Enable (1) or disable (0) VPN Log. -e <1/0> Enable (1) or disable (0) User Access Log. -c <1/0> Enable (1) or disable (0) Call Log. -w <1/0> Enable (1) or disable (0) WAN Log. -r <1/0> Enable (1) or disable (0) Router/DSL Information. -t <1/0> Enable (1) or disable (0) AlertLog Setup. -o Define the port number (1 ~ 65535) for AlertLog.
Example > sys mailalert -e 1 > sys mailalert -i 172.16.3.168 > sys mailalert -o 886 > sys mailalert -a john@draytek.com > sys mailalert -v ------ Current setting for Mail Alert -----Mail Alert: Enable SMTP Server IP Address: 172.16.3.168 SMTP Server Port: 886 Alert Mail Reciver E-maiil Address: john@draytek.com Mail Return E-mail Address: Use SSL: Disable SMTP Authentication: Disable Username for SMTP Authentication: Password for SMTP Authentication: Mail Alert for DoS Attack: Enable.
11 - GMT-06:00 Mexico City, Tegucigalpa 12 - GMT-05:00 Eastern Time (US & Canada) 13 - GMT-05:00 Indiana (East) 14 - GMT-05:00 Bogota, Lima, Quito 15 - GMT-04:00 Atlantic Time (Canada) 16 - GMT-04:00 Caracas, La Paz 17 - GMT-04:00 Santiago 18 - GMT-03:30 Newfoundland 19 - GMT-03:00 Brasilia 20 - GMT-03:00 Buenos Aires, Georgetown 21 - GMT-02:00 Mid-Atlantic 22 - GMT-01:00 Azores, Cape Verde Is.
Set Time Zone OK > sys time show *************** System Time *************** Current System Time: [2000 Jan 01 Sat 02:09:29] Time Server: [pool.ntp.org] Time Zone Index: [8]. GMT-07:00 ********************************************* Telnet Command: sys dashboard This command is used to display or hidden the information displayed on the dashboard. Syntax sys dashboard show sys dashboard -[ [- | ...
This command can close UPnP function. Example >upnp off UPNP say bye-bye Telnet Command: upnp on This command can enable UPnP function. Example >upnp on UPNP start. Telnet Command: upnp nat This command can display IGD NAT status. Example > upnp nat ? ****************** IGD NAT Status **************** ((0)) InternalClient >>192.168.1.10<<, RemoteHost >>0.0.0.
serviceType urn:schemas-microsoft-com:service:OSInfo:1 serviceId urn:microsoft-com:serviceId:OSInfo1 SCPDURL /upnp/OSInfo.xml controlURL /OSInfo1 eventURL /OSInfoEvent1 UDN uuid:774e9bbe-7386-4128-b627-001daa843464 >>>>> SERVICE TABLE2 <<<<< serviceType urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1 serviceId urn:upnp-org:serviceId:WANCommonIFC1 SCPDURL /upnp/WComIFCX.xml controlURL /upnp?control=WANCommonIFC1 eventURL /upnp?event=WANCommonIFC1 UDN uuid:2608d902-03e2-46a5-9968-4a54ca499148 . . .
The protocol >>0<< time >>0<< --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- Telnet Command: upnp wan This command is used to specify WAN interface to apply UPnP. Syntax upnp wan [n] Syntax Description Parameter Description n It means to specify WAN interface to apply UPnP. n=0, it means to auto-select WAN interface. n=1, WAN1 Example > upnp wan 1 use wan1 now.
index It means the index number of the user profile. There are 16 profiles allowed to be configured. So the range of such option is 1 ~ 16. Username Type a text (maximum 11 characters) as the username for the user profile. Password Type a text (maximum 11 characters) as the password for the user profile. Permission Specify the action (RWDLCR) permitted. If one of the actions is not allowed, simple type “-” instead. R – Read File. W – Write File. D – Delete File. L – List directory.
Example > vigbrg status Show gConfig setting of bridge mode [WAN1] IPv4 bridge is enable [LAN1]. Telnet Command: vigbrg cfgip This command allows users to transfer a bridge modem into ADSL router by accessing into and adjusting specified IP address. Users can access into Web UI of the router to manage the router through the IP address configured here. Syntax vigbrg cfgip [IP Address] Syntax Description Parameter Description IP Address It means to type an IP address for users to manage the router.
Syntax wan ppp_mru Syntax Description Parameter Description Type a number to represent the physical interface. For Vigor130, the number is 1 (which means WAN1). It means the number of PPP LCP MRU. The available range is from 1400 to 1600.
Syntax Description Parameter Description wan_no It means to indicate the WAN interface. 1: WAN1 dns_select It means to set primary or secondary DNS server. ipv4_addr It means to type the IPv4 address for the DNS server. Example > wan dns 1 pri 192.168.1.126 % Set WAN1 primary DNS done. % Now: 192.168.1.
wan forward [on] wan forward [off] Syntax Description Parameter Description on/off It means to enable or disable WAN forward. Example > wan forward ? %WAN forwarding is Disable! > wan forward on %WAN forwarding is enable! Telnet Command: wan status This command allows you to display the status of WAN connection, including connection mode, TX/RX packets, DNS settings and IP address.
wan detect ttl <1-255> wan detect target2 wan detect target_gw <1/0> wan detect interval wan detect retry wan detect status Syntax Description Parameter Description on Enable ping detection. The IP address of the target shall be set. off Enable ARP detection (default). always_on Disable link detect, always connected(only support static IP) -t
wan mvlan keeptag[pvc_no][on/off] Syntax Description Parameter Description pvc_no It means index number of PVC. There are 10 PVC, 0(Channel-1) to 9(Channel-9) allowed to be configured. However, bridge mode can be set on PVC number 2 to 9. status It means to display the whole Bridge status. save It means to save the configuration into flash of Vigor router. enable/disable It means to enable/disable the Multi-VLAN function. on/off It means to turn on/off bridge mode for the specific channel.
Example > % > % % % % % % > wan multifno 5 1 Configured channel 5 uplink to WAN1 wan multifno status Channel 4 uplink ifno: 3 Channel 5 uplink ifno: 3 Channel 6 uplink ifno: 3 Channel 7 uplink ifno: 3 Channel 8 uplink ifno: 3 Channel 9 uplink ifno: 3 Telnet Command: wan vlan This command allows you to configure the VLAN tag of WAN1.
-s [mtu_size] -d [decrease size] -w -c [count] Host/IP address: Type the IP address/domain name of the target. Set the MTU size base for Discovery. base_size: Available setting is 1000 ~ 1500. Set the MTU size to decrease between detections. decrease size: Available setting is 1 ~ 100. Specify the WAN interface to be detected. Set the times that you want to send the ping packets out. count: Available settings are 1 ~ 10. Default value is 3. Example > wan detect_mtu -w 1 -i 8.8.8.
Index CSV file, 158, 171 ６ 6rd Mode, 39 Current System Time, 76 6rd Prefix, 39 Ｄ 6rd Prefix Length, 39 Data Filter, 98 Data Flow Monitor, 183 Ａ Administrator Password, 137 Advance Mode, 105 Always On, 34, 35, 36, 37, 39 Applications, 72 ARP Cache Table, 177 ARP Detect, 26, 28 ARP Table, 59 Auth Type, 75 Auto Logout, 6 Auto-Update interval, 73 Aux.
Ｅ ISP Access Setup, 26 End IPv6 Address, 56 Ｋ End Port, 71 Event Code, 135 Keep Alive Period, 136 Extension WAN, 57 Keyword Group, 168 Keyword Object, 166 Ｆ File Extension Object, 169 Ｌ Filter Setup, 104 LAN, 48 Firewall, 98 LAN- General Setup, 50 Firmware Upgrade, 152 LAN Routed Prefix, 37 Force Update, 73 Local IP Address, 70 Log, 124 Ｇ Login, 19 General Setup, 23 Logout, 11 Login Name, 75 Group ID, 81 GUI Map, 9, 10 Ｍ Ｈ Mail Extender, 75 Hardware Installation, 3 Management, 13
Physical Mode, 23 Ping Detect, 26, 28, 35, 36, 37, 39 Ｓ Ping Diagnosis, 182 Schedule, 72, 76 Ping Gateway IP, 26, 28 Secondary DNS Server, 56 Ping Interval, 26, 28 Secondary IP Address, 53 Ping IP/Hostname, 35, 36, 37, 39 Security, 97 Ping Retry, 26, 28 Self-Signed Certificate, 148 Port Redirection, 62 Server Response, 75 Port Triggering, 71 Service API, 75 PPPoE, 15 Service Name, 64 PPPoE Pass-through, 26 Service Provider, 74 PPTP/L2TP, 18 Service Type Group, 164 Prefix Len, 96 Servi
Tunnel ID, 34 VLAN Tag, 41 Tunnel TTL, 37 VLAN Tag insertion, 24 Ｕ Ｗ Unique Local Address (ULA), 55 WAN, 22 UPnP, 72, 79 WAN Connection Detection, 26, 28, 35, 36, 37, 39 URL Access Control, 124 WAN Interface, 64, 70 URL Content Filter, 102, 121 WAN Type, 41 URL Content Filter Profile, 122 Web Console, 10 Username, 26, 33, 34 Web Feature, 125 Wildcard, 75 Ｖ Wizard Mode, 105 Virtual WAN, 13 356 Vigo160 Series User’s Guide
