VigorFly 210 Wi-Fi Router User’s Guide Version: 1.0 Firmware Version :V1.
Copyright Information Copyright Declarations Copyright 2011 All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders. Trademarks The following trademarks are used in this document: z Microsoft is a registered trademark of Microsoft Corp.
European Community Declarations Manufacturer: Address: Product: DrayTek Corp. No. 26, Fu Shing Road, HuKou County, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 VigorFly 210 Series Router DrayTek Corp. declares that VigorFly 210 is in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC.
Table of Contents Preface .........................................................................................................1 1.1 Web Configuration Buttons Explanation ................................................................................. 1 1.2 LED Indicators and Connectors .............................................................................................. 2 1.3 Hardware Installation ...............................................................................................
3.4.4 Content Filtering ............................................................................................................. 64 3.5 CSM ...................................................................................................................................... 66 3.5.1 Web Content Filter.......................................................................................................... 66 3.6 Applications ..............................................................................
4.3 Pinging the Router from Your Computer ............................................................................. 132 4.4 Checking If the ISP Settings are OK or Not ........................................................................ 133 4.5 Forcing Vigor Router into TFTP Mode for Performing the Firmware Upgrade ................... 133 4.6 Backing to Factory Default Setting If Necessary ................................................................ 136 4.7 Contacting Your Dealer ................
Preface VigorFly 210 is a compact broadband router with 802.11n WLAN network. Its Ethernet WAN port can connect to VDSL/VDSL2/GPON/G.SHDSL /ADSL2+/ADSL/cable modem while you have fixed line. The NAT throughput can easily manage time-critical multimedia streaming. It's easy for family or friends to hook up PCs via embedded 10/100 Ethernet LAN switch to enjoy multimedia applications. Two antennas provide you with speedy WLAN networking. If you are out of coverage of fixed line, you can directly plug 3.
1.2 LED Indicators and Connectors Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. LED Status ACT Off Blinking USB WAN LAN 1 - 4 WLAN (Blue LED) on WLAN button WPS (Orange LED) on WLAN button WPS Button Explanation The system is not ready or is failed. The system is ready and can work normally. On A USB device is connected and active. Blinking The data is transmitting. On The WAN port is connected. Blinking It will blink while transmitting data.
1.3 Hardware Installation Before starting to configure the router, you have to connect your devices correctly. 1. Connect this device to a modem with an Ethernet cable. 2. Connect the LAN port to your computer with a RJ-45 cable. 3. Connect one end of the power adapter to the Power port of this device. Connect the other end to the wall outlet of electricity. 4. Power on the router. 5. Check the ACT, WAN and LAN LEDs to assure network connections.
1.4 Printer Installation You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.draytek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients). 1. Connect the printer with the router through USB/parallel port. 2. Open Start->Settings-> Printer and Faxes.
3. Open File->Add a New Computer. A welcome dialog will appear. Please click Next. 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next.
6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish.
9. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. 10. For the final stage, you need to go back to Control Panel-> Printers and edit the property of the new printer you have added. 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and UPR name.
The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ; find out the link of Printer Server and click it; then click the What types of printers are compatible with Vigor router? link.
Basic Settings For using the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. 2.1 Accessing Web Page 1. Make sure your PC connects to the router correctly. Notice: You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1.
2.2 Changing Password Before configuring the web pages, please change the password for the original security of the router. 1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. 2. Please type “admin/admin” on Username/Password for admin mode and click Login. Note: The home page will change slightly in accordance with the type of the router you have. 3. To change the password, please access into Admin Mode.
2.3 Quick Start Wizard Notice: Quick Start Wizard for user mode operation is the same as for admin mode operation. If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is welcome page, please click Next. 2.3.1 Setting up the Password The first screen of Quick Start Wizard is entering login account and password. After typing a new password, please click Next.
2.3.2 Setting up the Time and Date On the next page as shown below, please select the Time Zone for the router installed and specify the NTP server(s). Then click Next for next step. 2.3.3 Setting up the Internet Connection for WAN1 On the next page as shown below, please select the appropriate connection type according to the information from your ISP. There are several types offered in this page. Each connection type will bring out different web page.
4G USB Modem If you want to access Internet with 4G USB Modem, choose 4G USB Modem as the Access Mode. Corresponding settings will be displayed for you to configure. Available parameters are listed below: Item Description Service Provider Choose the local service provider which can serve network service according to the nature of USB Modem (LTE/WiMAX) installed. For example, you live in Taiwan and have a WiMAX modem inserted onto VigorFly 210.
Item Description will be better. Such item is required for WiMAX USB Modem. SIM PIN Code Some service provider might ask you to offer such information. Type PIN code of the SIM card that will be used to access Internet. Network Mode Force Vigor router to connect Internet with the mode specified here. If you choose 4G/3G/2G as network mode, the router will choose a suitable one according to the actual wireless signal automatically.
Item Description SIM PIN code Type PIN code of the SIM card that will be used to access Internet. Modem Initial String1/2 Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. APN Name APN means Access Point Name which is provided and required by some ISPs. Modem Dial String Such value is used to dial through USB mode. Please use the default value. If you have any question, please contact to your ISP.
Item Description Default Gateway Type the gateway IP address. Primary DNS Server Type in the primary IP address for the router. Secondary DNS Server Type in secondary IP address for necessity in the future. After finishing the settings here, please click Next. DHCP It is not necessary for you to type any IP address manually. Simply choose this type and the system will obtain the IP address automatically from DHCP server.
PPPoE PPPoE stands for Point-to-Point Protocol over Ethernet. It relies on two widely accepted standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a common broadband medium, such as a single DSL line, wireless device or cable modem. All the users over the Ethernet can share a common connection. PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet.
Item Description seconds. The range is XX ~ XX. After finishing the settings here, please click Next. PPTP/L2TP If you click PPTP/L2TP as the connection type, please manually enter the Username/Password provided by your ISP and all the required information. Available parameters are listed below: Item Description L2TP/PPTP Server IP Specify the IP address of the PPTP/L2TP server. Username Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP.
Item Description WAN IP Network Settings You can choose Obtain an IP address automatically or Specify an IP address as address mode setting. IP Address Type the IP address if you choose Static IP as the WAN IP network setting. Subnet Mask Type the subnet mask if you chose Static IP as the WAN IP. Redial Policy If you want to connect to Internet all the time, you can choose Always On. After finishing the settings here, please click Next. 2.3.
Item Description The available settings will be different based on the service provider specified. In this case, Taiwan (Vmax) is chosen as an example. Username Type the user name acquired from the service provider. Password Type the password acquired from the service provider. Cipher Suite Cipher Suite –There are two encryption methods offered for you to choose as cipher suite. Keep the default setting will be better. Such item is required for WiMAX USB Modem.
Item Description Enable Wireless LAN Check the box to enable the wireless function. Hide SSID Check this box to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN. SSID It means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "DrayTek". We suggest you to change it. Mode Choose the wireless mode for this router.
Item Description selected at a time. The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64-bit encryption level, or restricted to 13 ASCII characters or 26 hexadecimal values in 128-bit encryption level. The allowed content is the ASCII characters from 33(!) to 126(~) except '#' and ','. WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK Accepts only WPA clients and the encryption key should be entered in PSK.
WEP/802.1x Remote Authentication Dial-In User Service (RADIUS) is a security authentication client/server protocol that supports authentication, authorization and accounting, which is widely used by Internet service providers. It is the most common method of authenticating and authorizing dial-up and tunneled network users. The built-in RADIUS client feature enables the router to assist the remote dial-in user or a wireless station and the RADIUS server in performing mutual authentication.
WPA/802.1x The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Available parameters are listed below: Item Description WPA Algorithms Select TKIP, AES or TKIP/AES as the algorithm for WPA. Key Renewal Interval WPA uses shared key for authentication to the network. However, normal network operations use a different encryption key that is randomly generated.
WPA2/802.1x The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Available parameters are listed below: Item Description WPA Algorithms Select TKIP, AES or TKIP/AES as the algorithm for WPA. Key Renewal Interval WPA uses shared key for authentication to the network. However, normal network operations use a different encryption key that is randomly generated.
Item Description IP Address Enter the IP address of RADIUS server. Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138. Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Session Timeout Set the maximum time of service provided before re-authentication.
Item Description generated key that is periodically replaced. Enter the renewal security time (seconds) in the column. Smaller interval leads to greater security but lower performance. Default is 3600 seconds. Set 0 to disable re-key. IP Address Enter the IP address of RADIUS server. Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138.
2.4 Online Status The online status shows the system status, WAN status, and other status related to this router within one page. If you select PPPoE as the protocol, you will find out a link of Dial PPPoE or Drop PPPoE in the Online Status web page. Detailed explanation is shown below: Item Description LAN Status IP Address - Displays the IP address of the LAN interface. TX Packets - Displays the total transmitted packets at the LAN interface.
- Displays the total uptime of the interface. Primary DNS - Displays the primary DNS setting. Secondary DNS - Displays the secondary DNS setting. TX Packets - Displays the total transmitted packets at the WAN interface. TX Rate - Displays the speed of transmitted octets at the WAN interface. RX Packets - Displays the total number of received packets at the WAN interface. RX Rate - Displays the speed of received octets at the WAN interface. IPv6 Address - Display the IP address for Ipv6 protocol.
2.6 Registering Vigor Router You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the steps below to finish the router registration. 1. Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. 2. Click Support Area>>Production Registration from the home page. 3.
4. The following page will be displayed after you logging in MyVigor. From this page, please click Add. 5. When the following page appears, please type in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit. 6. When the following page appears, your router information has been added to MyVigor database.
7. Click OK. Now, you have finished the product registration.
Advanced Web Configuration This chapter will guide users to execute advanced (full) configuration through admin mode operation. 1. Open a web browser on your PC and type http://192.168.1.1. The window will ask for typing username and password. 2. Please type “admin/admin” on Username/Password for administration operation. Now, the Main Screen will appear. Be aware that “Admin mode” will be displayed on the bottom left side. 3.
From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 What are Public IP Address and Private IP Address As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts.
Network Connection by 4G USB Modem To meet the request in bandwidth / rate for data transmission via wireless connection, VigorFly 210 offers 4G USB Modem to satisfy requirements for different countries. Also, it can be used as a backup device by configured with WAN2, and will be invoked instead whenever WAN1 connection is not available due to unexpected error. Below shows the menu items for WAN. 3.1.1 Internet Access This page allows you to set WAN configuration with different modes.
Static or Dynamic IP for WAN1 For static IP mode, you usually receive a fixed public IP address or a public subnet, namely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service provider will offer a public subnet. If you have a public subnet, you could assign an IP address or many IP address to the WAN interface.
Item Description address here because your ISP should provide you with usually more than one DNS Server. If your ISP does not provide it, the router will automatically apply default DNS Server IP address: 198.95.1.1 to this field. Secondary DNS Server - You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address.
PPPoE for WAN1 To choose PPPoE as the accessing protocol of the internet, please select PPPoE from the Internet Access menu. The following web page will be shown. Available parameters are listed below: Item Description ISP Access Setup Username - Type in the username provided by ISP in this field. Password - Type in the password provided by ISP in this field. Confirm Password - Re-enter the password for confirmation.
Item Description Subnet Mask - Type the subnet mask if Static IP is selected as the Mode for IPTV WAN application. MTU It means Max Transmit Unit for packet. The default setting is 1442. WAN Connection Detection Such function allows you to verify whether network connection is alive or not through Ping Detect. Mode – Choose None or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.
PPTP/L2TP for WAN1 To use PPTP/L2TP as the accessing protocol of the internet, please choose PPTP/L2TP from Connection Type drop down menu. The following web page will be shown. Available parameters are listed below: Item Description L2TP Client Mode / PPTP Client Mode Server IP - Type in the IP address of the PPTP/L2TP server. ISP Access Setup User Name - Type in the username provided by ISP in this field. Password - Type in the password provided by ISP in this field.
Item Description Default Gateway - Type the gateway address for this router. WAN Physical Type Specify the data transmitting rate for such mode. MAC Address Clone MAC Address Clone is available when the box of Enable is checked. The router will detect the MAC address automatically. The result will be displayed in the field of MAC Address. After finishing all the settings here, please click OK to activate them.
3G USB Modem 3G Always On – SIM PIN code - Type PIN code of the SIM card that will be used to access Internet. Modem Initial String1/2 - Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. APN Name - APN means Access Point Name which is provided and required by some ISPs. Modem Dial String - Such value is used to dial through USB mode. Please use the default value. If you have any question, please contact to your ISP.
Available parameters are listed below: Item Description 4G USB Modem Service Provider – Choose the local service provider which can serve network service according to the nature of USB Modem (LTE/WiMAX) installed. For example, you live in Taiwan and have a WiMAX modem inserted onto VigorFly 210. You can choose Taiwan (Global Mobile) to configure necessary settings and then surf the Internet easily. Username - Type the user name acquired from the service provider.
Item Description SIM PIN code – Type PIN code of the SIM card that will be used to access Internet. Such item is required for LTE USB Modem. Network Mode – Force Vigor router to connect Internet with the mode specified here. If you choose 4G/3G/2G as network mode, the router will choose a suitable one according to the actual wireless signal automatically. APN Name - APN means Access Point Name which is provided and required by some ISPs. Such item is required for LTE USB Modem.
Yota/One USB Modem for WAN1 If your router connects to a Yota/One USB modem and you want to access Internet via Yota/One USB modem, choose Yota/One USB as connection type and type the required information in this web page. Available parameters are listed below: Item Description Keep WAN Connection Normally, this function is designed for Dynamic IP environments because some ISPs will drop connections if there is no traffic within certain periods of time.
3G USB Modem for WAN2 WAN2 is used for backup only. Therefore, it is an optional setting. The default is None for Access Mode. If it is required, choose 3G USB Modem or 4G USB Modem as a backup WAN interface to access into Internet. If you want to enable 3G/4G USB Modem in WAN2, make sure your WAN1 connection type is not in 3G/4G mode. When the WAN1 connection is broken, the router will try to keep the connection with 3G mode.
4G USB Modem for WAN2 Below shows the configuration page for 4G USB Modem: Available parameters are listed below: Item Description 4G USB Modem Service Provider –Choose the local service provider which can serve network service according to the nature of USB Modem (LTE/WiMAX) installed. For example, you live in Taiwan and have a WiMAX modem inserted onto VigorFly 210. You can choose Taiwan (Global Mobile) to configure necessary settings and then surf the Internet easily.
Cipher Suite Cipher Suite –There are two encryption methods offered for you to choose as cipher suite. Keep the default setting will be better. Such item is required for WiMAX USB Modem. Network Mode Force Vigor router to connect Internet with the mode specified here. If you choose 4G/3G/2G as network mode, the router will choose a suitable one according to the actual wireless signal automatically. APN Name APN means Access Point Name which is provided and required by some ISPs.
3.1.2 Multi-VLAN This router allows you to create multi-VLAN for different purposes of data transferring. Simply go to WAN and select Multi-VLAN. General The system allows you to set up to eight channels for multi-VLAN. Available settings are explained as follows: Item Description Enable Multi-VLAN Setup Check this box to activate such setting. Channel Display the number of each channel. Enable Check this box to enable that channel.
Bridge General page lets you set general channel for multi-VLAN. This page allows you to configure VLAN settings under Bridge mode. Simply click the Bridge tab to open Bridge configuration page. Available settings are explained as follows: Item Description Enable Multi-VLAN Setup Check this box to activate such setting. Enable Check this box to enable that channel. Only channel 3 to 8 can be set in this page, for channel 1 to 2 are reserved for NAT using. P1 to P4 It means the LAN port 1 to 4.
3.2 LAN Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP. Basics of LAN The most generic function of Vigor router is NAT. It creates a private subnet of your own. As mentioned previously, the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address.
What is Routing Information Protocol (RIP) Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing. This allows users to change the information of the router such as IP address and the routers will automatically inform for each other. What is Static Route When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other method.
Available settings are explained as follows: Item Description LAN IP Network Configuration IP Address - Type in private IP address for connecting to a local private network (Default: 192.168.1.1). Subnet Mask- Type in an address code that determines the size of the network. (Default: 255.255.255.0) For IP Routing Usage - Click Enable to invoke this function. The default setting is Disable. 2nd IP Address - Type in secondary IP address for connecting to a subnet. (Default: 192.168.2.
Item Description Server IP address: 194.109.6.66 to this field. Secondary DNS Address - You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address: 194.98.0.1 to this field.
Item Description Comment - Type words as notification for such routing. After finishing all the settings here, please click OK to activate them. 3.2.3 Bind IP to MAC This function is used to bind the IP and MAC address in LAN to have a strengthening control in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC address, it might cause you not access into the Internet.
ARP Table This table is the LAN ARP table of this router. The information for IP and MAC will be displayed in this field. Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below. Select All - Click this link to select all the items in the ARP table. Sort - Reorder the table based on the IP address. Refresh - Refresh the ARP table listed below to obtain the newest ARP table information.
On NAT page, you will see the private IP address defined in RFC-1918. Usually we use the 192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. 3.3.
Press any number under Index to access into next page for configuring port redirection. Available settings are explained as follows: Item Description Enable Check this box to enable such Port Redirection profile.
Type Specify the type for such profile. The type of Virtual server offers several options with dedicated server and port number. Packets passing through such port number will be redirected into the local IP address and local port assigned below. If User Define is selected, there are three sub-options offered to choose. If Virtual Server is selected, specify a server from the drop down list. Protocol Select the transport layer protocol (TCP or UDP or TCP+UDP).
3.3.2 DMZ Host As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port. Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN.
3.3.3 Session Limit A PC with private IP address can access to the Internet via NAT router. The router will generate the records of NAT sessions for such connection. The P2P (Peer to Peer) applications (e.g., BitTorrent) always need many sessions for procession and also they will occupy over resources which might result in important accesses impacted. To solve the problem, you can use limit session to limit the session procession for specified Hosts.
3.4.1 DoS Defense As a sub-functionality of IP Filter/Firewall, there are 5 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Available settings are explained as follows: Item Description Enable Dos Defense Check the box to activate the DoS Defense Functionality. Enable SYN flood defense Check the box to activate the SYN flood defense function.
Enable Ping of Death Defense Check the box to activate the Block Ping of Death function. This attack involves the perpetrator sending overlapping packets to the target hosts so that those target hosts will hang once they re-construct the packets. The Vigor routers will block any packets realizing this attacking activity. After finishing all the settings here, please click OK to save the configuration. 3.4.2 MAC/IP/Port Filtering This page allows you to set up to 32 MAC/IP/Port Filtering rules.
Protocol - Specify the protocol(s) which this filter rule will apply to. Dest Port Range - Determine the port range for the destination. Source Port Range - Determine the port range for the source. Action – Accept: the packets that match with such rule will be accepted. Drop: the packets that match with such rule will be blocked. Comment - Enter filter set comments/description. Maximum length is 23–character long.
Once you have activated your Web Filtering service in Vigor router and chosen the categories of website you wish to restrict, each URL address requested (e.g.www.bbc.co.uk) will be checked against our server database. This database is updated as frequent as daily by a global team of Internet researchers. The server will look up the URL and return a category to your router. Your Vigor router will then decide whether to allow access to this site according to the categories you have selected.
you to choose. Check Proxy, Java or ActiveX and click OK. The system will filter and block the web pages according to the item you specified here. Web URL Filter Settings URL – type the URL of the web site in the field of URL and click Add. The new link with the URL you specified will be shown on this page. The system will filter and block the web pages according to the item you specified here. To delete the URL setting, simply click that one and click Delete to remove it.
Once you have activated your Web Filtering service in Vigor router and chosen the categories of website you wish to restrict, each URL address requested (e.g.www.bbc.co.uk) will be checked against our server database. This database is updated as frequent as daily by a global team of Internet researchers. The server will look up the URL and return a category to your router. Your Vigor router will then decide whether to allow access to this site according to the categories you have selected.
Activate Click it to activate Commtouch WCF mechanism. Misclassified Report You can send a report for mistaken classified URL to Commtouch by clicking such link. How to activate web content filter? Before activating web content filter, register your Vigor router first. Refer to 2.6 Registering Vigor Router for detailed information. Then, follow the steps listed blow to activate WCF. 1. Click the Activate link from Web-Filter License to activate WCF service. 2. A Login page will be shown on the screen.
3. From the Device’s Service section, click the Trial button for WCF service with provider Commtouch. Available parameters are listed below: Item Description Rename It allows you to change the account name. Transfer It allows you to transfer the Vigor device together with applied license to someone who has already registered another account in myvigor.draytek.com. Be sure to press this button to transfer the product to whom you want to give.
5. When this page appears, click Register. 6. Next, when the registration is completed. You will get the following screen. 7. Return to web configuration of VigorFly 210. 8. Refresh the page of CSM>>Web Content Filter. A green circle appears next to the link of License Information. It means the WCF license is valid.
3.6 Applications Below shows the menu items for Applications. 3.6.1 Dynamic DNS The ISP often provides you with a dynamic IP address when you connect to the Internet via your ISP. It means that the public IP address assigned to your router changes each time you access the Internet. The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address. It allows the router to update its online WAN IP address mappings on the specified Dynamic DNS server.
Password Type in the password that you set for applying domain. Forced Update Period Select a time interval for updating from the NTP server. After finishing all the settings here, please click OK to save the configuration. 3.6.2 802.1d Spanning Tree The Spanning Tree Protocol (STP) is a link layer network protocol that ensures a loop-free topology for any bridged LAN. Check the box to invoke such feature and click OK to save it. 3.6.
the major feature of UPnP on the router is “NAT Traversal”. This enables applications inside the firewall to automatically open the ports that they need to pass through a router. It is more reliable than requiring a router to work out by itself which ports need to be opened. Further, the user does not have to manually set up port mappings or a DMZ. UPnP is available on Windows XP and the router provide the associated support for MSN Messenger to allow full use of the voice, video and messaging features.
The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will block the accessing ability of some network ports. Security Considerations Activating the UPnP function on your network may incur some security threats. You should consider carefully these risks before activating the UPnP function.
You can set up to 15 schedules. To add a schedule, please click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below. Available settings are explained as follows: Item Description Enable Check to enable the schedule. Start Date Specify the starting date of the schedule. Start Time Specify the starting time of the schedule. End Time Specify the ending time of the schedule.
After finishing all the settings here, please click OK to save the configuration. 3.7 Wireless LAN 3.7.1 Basic Concepts Over recent years, the market for wireless communications has enjoyed tremendous growth. Wireless technology now reaches or is capable of reaching virtually every location on the surface of the earth. Hundreds of millions of people exchange information every day via wireless communication products. The Vigor router is designed for maximum flexibility and efficiency of a small office/home.
WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit key. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys. WPA (Wi-Fi Protected Access), the most dominating security mechanism in industry, is separated into two categories: WPA-personal or called WPA Pre-Share Key (WPA/PSK), and WPA-Enterprise or called WPA/802.1x.
3.7.2 General Setup By clicking the General Setup, a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Available settings are explained as follows: Item Description Enable Wireless LAN Check the box to enable wireless function. Mode At present, the router can connect to, 11g Only, 11b Only, 11n Only, Mixed (11g+11n), Mixed (11b+11g), Mixed (11b+11g+11n) stations simultaneously.
Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN. Depending on the wireless utility, the user may only see the information except SSID or just cannot see any thing about Vigor wireless router while site surveying. The system allows you to set three sets of SSID for different usage. SSID Set a name for the router to be identified.
That is, the wireless client must support this feature and invoke the function, too. Note: Vigor N61 wireless adapter supports this function. Therefore, you can use and install it into your PC for matching with Packet-OVERDRIVE (refer to the following picture of Vigor N61 wireless utility window, choose Enable for TxBURST on the tab of Option). Universal Repeater If such mode is enabled, the access point can act as a wireless repeater; it can be Station and AP at the same time.
Available settings are explained as follows: Item Description Mode There are several modes provided for you to choose. z Disable The encryption mechanism is turned off. z WEP Accepts only WEP clients and the encryption key should be entered in WEP Key.
Available settings are explained as follows: Item Description WEP Key1-Key4 Four keys can be entered here, but only one key can be selected at a time. The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64-bit encryption level, or restricted to 13 ASCII characters or 26 hexadecimal values in 128-bit encryption level. The allowed content is the ASCII characters from 33(!) to 126(~) except '#' and ','.
z WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK Accepts only WPA clients and the encryption key should be entered in PSK. The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Available settings are explained as follows: z Item Description WPA Algorithm Select TKIP, AES or TKIP/AES as the algorithm for WPA.
The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Select WPA, WPA2 or Auto as WPA mode. Available settings are explained as follows: Item Description 802.1x WEP Disable - Disable the WEP Encryption. Data sent to the AP will not be encrypted. Enable - Enable the WEP Encryption.
z Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138. Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Session Timeout Set the maximum time of service provided before re-authentication. Set to zero to perform another authentication immediately after the first authentication has successfully completed. (The unit is second.
RADIUS Server Guide you to access into next pop-up window to configure RADIUS server settings. Click the link of RADIUS Server to access into the following page for more settings. Available settings are explained as follows: Item Description IP Address Enter the IP address of RADIUS server. Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138.
z WPA2/802.1x The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Available settings are explained as follows: Item Description WPA Algorithms Select TKIP, AES or TKIP/AES as the algorithm for WPA. Key Renewal Interval WPA uses shared key for authentication to the network.
Disable - Disable IEEE 802.1X Pre-Authentication. RADIUS Server Guide you to access into next pop-up window to configure RADIUS server settings. Click the link of RADIUS Server to access into the following page for more settings. Available settings are explained as follows: Item Description IP Address Enter the IP address of RADIUS server. Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138.
z Mixed (WPA+WPA2)/802.1x The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Available settings are explained as follows: Item Description WPA Algorithms Select TKIP, AES or TKIP/AES as the algorithm for WPA. Key Renewal Interval WPA uses shared key for authentication to the network.
Click the link of RADIUS Server to access into the following page for more settings. Available settings are explained as follows: Item Description IP Address Enter the IP address of RADIUS server. Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138. Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret.
Available settings are explained as follows: Item Description Policy Select to enable any one of the following policy or disable the policy. Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually. Choose Isolate WLAN from LAN will separate all the WLAN stations from LAN based on the MAC Address list. MAC Address Filter Display all MAC addresses that are edited before. Client’s MAC Address - Manually enter the MAC address of wireless client.
station with network card installed, press Start PBC button of network card. If you want to use PIN code, you have to know the PIN code specified in wireless client. Then provide the PIN code of the wireless client you wish to connect to the vigor router. Available settings are explained as follows: Item Description Enable WPS Check this box to enable WPS setting.
Item Description WPS Current Status Display related system information for WPS. If the wireless security (encryption) function of the router is properly configured, you can see ‘Configured’ message here. WPS SSID Display current selected SSID. WPS Auth Mode Display current authentication mode of the router. Only WPA2/PSK and WPA/PSK support WPS. WPS Encryp Type Display encryption mode (None, WEP, TKIP, AES, etc.) of the router.
The application for the WDS-Repeater mode is depicted as below: The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be forwarded to local wired or wireless hosts. In other words, only Repeater mode can do WDS-to-WDS packet forwarding.
Click WDS from Wireless LAN menu. The following page will be shown. Available settings are explained as follows: Item Description WDS Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge Mode is designed to fulfill the first type of application. Repeater Mode is for the second one.
Item Description TKIP, AES and Key or Peer Mac Address field valid or not. Choose one of the types for the router. Please disable the unused link to get better performance. Key - Type 8 ~ 63 ASCII characters or 64 hexadecimal digits leading by “0x”. Peer Mac Address Four peer MAC addresses are allowed to be entered in this page at one time. Phy Mode There are three types of transmission rates developed by different techniques for Phy Mode. Data will be transmitted via communication channel.
3.7.7 Universal Repeater This menu is available only when it is enabled in Wireless LAN>>General Setup. It allows you to specify which AP that remote client can connect to. The access point can act as a wireless repeater; it can be Station and AP at the same time. It can use Station function to connect to a Root AP and use AP function to serve all wireless stations within its coverage. Note: While using Universal Repeater Mode, the access point will demodulate the received signal.
Available settings are explained as follows: Item Description Encryption Type Choose None to disable the WEP Encryption. Data sent to the AP will not be encrypted. To enable WEP encryption for data transmission, please choose WEP. WEP Keys Four keys can be entered here, but only one key can be selected at a time.
Item Description Pass Phrase Either 8~63 ASCII characters, such as 012345678 (or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). After finishing all the settings here, please click OK to save the configuration. 3.7.8 AP Discovery Vigor router can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know which channel is clean for usage. Also, it can be used to facilitate finding an AP for a WDS link.
Item Description AP’s SSID To specify an AP to be applied with WDS settings, you can specify MAC address or SSID for the AP. Here is the place that you can type the SSID of the AP. Add to WDS Settings Click Bridge or Repeater for the specified AP. Next, click Add. Later, the MAC address of the AP will be added and be shown on WDS settings page. After finishing all the settings here, please click OK to save the configuration.
3.7.9 WMM Configuration WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access categories derived from 802.1d (prioritization tabs). The categories are designed with specific types of traffic, voice, video, best effort and low priority data. There are four accessing categories - AC_BE , AC_BK, AC_VI and AC_VO for WMM. APSD (automatic power-save delivery) is an enhancement over the power-save mechanisms supported by Wi-Fi networks.
Item Description Txop It means transmission opportunity. For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission, please set greater value for them to get highest transmission opportunity. Specify the value ranging from 0 to 65535. ACM It is an abbreviation of Admission Control Mandatory. It can restrict stations from using specific category class if it is checked.
Item Description wireless access, the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client. Only the valid MAC address that has been configured can access the wireless LAN interface. Add - Click this button to add current typed MAC address into Access Control. After finishing all the settings here, please click OK to save the configuration. 3.8 IPv6 3.8.
Available settings are explained as follows: Item Description MAC Address Display the MAC Address for the connecting client. IPv6 Address The least significant 64 bits are usually chosen as the interface hardware address constructed in modified EUI-64 format. Prefix Length Display the fixed value (64) for prefix length. Static IPv6 This type allows you to setup static IPv6 address for WAN. Available settings are explained as follows: Item Description IPv6 Address Type your IPv6 static IP here.
TSPC Tunnel setup protocol client (TSPC) is an application which could help you to connect to IPv6 network easily. Please make sure your IPv4 WAN connection is OK and apply one free account from hexage (http://gogonet.gogo6.com/page/freenet6-account ) before you try to use TSPC for network connection. TSPC would connect to tunnel broker and requests a tunnel according to the specifications inside the configuration file.
Auto-reconnect Delay After passing the time set here, the client will retry to connect in case of failure or keepalive timeout. 0 means not retry. Keepalive Check the box to keep the connection between TSPC and tunnel broker always on. TSPC will send ping packet to make sure the connection between both ends is normal. Keepalive Interval Type the time for the interval between two keepalive messages transferring from the client to the broker.
Item Description Advertisement Lifetime - The lifetime associated with the default router in units of minutes. It's used to control the lifetime of the prefix. The maximum value corresponds to 18.2 hours. A lifetime of 0 indicates that the router is not a default router and should not appear on the default router list. After finishing all the settings here, please click OK to save the configuration. 3.8.3 IPv6 Routing This page displays the routing table for the protocol of IPv6.
3.8.4 TSPC Status IPv6 TSPC status web page could help you to diagnose the connection status of TSPC. TSPC log contains some debug information from program. If TSPC has not configured properly, the router will display the following page when the user tries to connect through TSPC connection. When TSPC configuration has been done, the router will start to connect. The connecting page will be shown as below: When the router detects all the information, the screen will be shown as follows.
Each item is explained as follows: Item Description Connection Status It will bring out different pages to represent IPv6 disconnection, connecting and connected. Tunnel Information Display interface name (used to send TSPC prefix), tunnel mode, local endpoint addresses, remote endpoint address, TSPC Prfix, TSPC Prefixlen (prefix length), tunnel broker and so on. Tunnel Status Disconnected - The remote client doesn't connect to the tunnel server.
When your PC obtains the IPv6 address, please connect to http://www.ipv6.org. If your PC access Internet via IPv6 connection, your IPv6 address will be shown on the web page immediately. Refer to the following figure.
3.9 System Maintenance For the system setup, there are several items that you have to know the way of configuration: System Status, Administrator Password, Configuration Backup, Syslog/Mail Alert, Time and Date, Management, Reboot System, and Firmware Upgrade. Below shows the menu items for System Maintenance. 3.9.1 System Status The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information.
Item Description System Date Display current time and date for the system server. System Uptime Display the connection time for the system server. Operation Mode Display the connection mode for the router. System Memory total - Display the total dynamic RAM size for the whole system. Memory left - Display the remaining RAM size for the whole system. LAN MAC Address - Display the MAC address of the LAN Interface. IP Address - Display the IP address of the LAN Interface.
3.9.2 TR-069 Vigor router with TR-069 is available for matching with VigorACS server. Such page provides VigorACS and CPE settings under TR-069 protocol. All the settings configured here is for CPE to be controlled and managed with VigorACS server. Users need to type URL, username and password for the VigorACS server that such device will be connected. However URL, username and password under CPE client are fixed that users cannot change it. The default CPE username and password are "vigor" and "password".
Password: password CPE Settings Such information is useful for Auto Configuration Server. Enable/Disable – Allow/Deny the CPE Client to connect with Auto Configuration Server. Port – Sometimes, port conflict might be occurred. To solve such problem, you might change port number for CPE. Periodic Inform Settings Disable – The system will not send inform message to ACS server. Enable – The system will send inform message to ACS server periodically (with the time set in the box of interval time).
3.9.4 User Password Sometimes, you may want to access into User Mode to configure the web settings for some reason. Vigor router allows you to set new user password to login into the WUI to fit your request. Simply open System Maintenance>>User Password. Available parameters are explained as follows: Item Description Enable User Mode Check this box to enable user mode operation. If you do not check this box, you cannot access into the user mode operation even if you enter user password in login page.
3. Log out Vigor router Web Configurator. 4. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. 5. The main screen with User Mode will be shown as follows.
Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. 3.9.5 Configuration Backup Backup the Configuration Follow the steps below to backup your configuration. 1. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. 2. Type a key arbitrarily for encrypting the file. Keep the key in mind. You will need it whenever you want to restore such file.
4. Click Save button, the configuration will download automatically to your computer as a file named config.cfg. The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Restore Configuration 1. Go to System Maintenance >> Configuration Backup.
3.9.6 Syslog/Mail Alert SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow debug equipments. Available parameters are explained as follows: Item Description Syslog Access Setup Enable - Check Enable to activate function of syslog. Server IP Address - The IP address of the Syslog server. Destination Port - Assign a port for the Syslog protocol. Log Level - Choose the severity level for the system log entry.
For viewing the Syslog, please do the following: 1. Just set your monitor PC’s IP address in the field of Server IP Address 2. Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu. 3. From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. 3.9.
Available parameters are explained as follows: Item Description Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as router’s system time. Use NTP Client Select to inquire time information from Time Server on the Internet using assigned protocol. Time Zone Select the time zone where the router is located. NTP Server Type a new NTP server.
servers. After finishing all the settings here, please click OK to save the configuration. 3.9.9 Reboot System The Web Configurator may be used to restart your router for using current configuration. Click Reboot System from System Maintenance to open the following page. Click Yes. The router will take 5 seconds to reboot the system.
3.10 Diagnostics Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3.10.1 Routing Table Click Diagnostics and click Routing Table to open the web page. Each item is explained as follows: Item Description Destination Display the IP address of the routing. Netmask Display the subnet mask of the routing. Gateway Display the gateway IP address of the routing. Flags Display the routing status.
3.10.2 System Log Click Diagnostics and click System Log to open the web page. Each item is explained as follows: Item Description Clear Click it to clear this page. Refresh Click it to reload the page. 3.10.3 DHCP Table The facility provides information on IP address assignments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page.
3.10.4 Connection Graph Click Diagnostics and click Connection Graph to open the web page. Choose WAN or Backup WAN for viewing different connection graph. Click Refresh to renew the graph at any time. 3.10.5 Data Flow Monitor This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. Click Diagnostics and click Data Flow Monitor to open the web page.
Auto-refresh Check this box to let the system automatically refresh this page. Refresh Click this link to refresh this page manually. Index Display the number of the data flow. IP Address Display the IP address of the monitored device. TX rate (kbps) Display the transmission speed of the monitored device. RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display the session number. 3.10.6 Ping Diagnosis Click Diagnostics and click Ping Diagnosis to pen the web page.
3.11 Support Area When you click the menu item under Support Area, you will be guided to visit www.draytek.com and open the corresponding pages directly. Click Support Area>>Application Note, the following web page will be displayed. Click Support Area>>FAQ, the following web page will be displayed.
Click Support Area>>Product Registration, the following web page will be displayed. Refer to section 2.6 Registering Vigor Router for detailed information.
Trouble Shooting This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Checking if the hardware status is OK or not. z Checking if the network connection settings on your computer are OK or not. z Pinging the router from your computer. z Checking if the ISP settings are OK or not.
4.2 Checking If the Network Connection Settings on Your Computer Is OK or Not Sometimes the link failure occurs due to the wrong network connection settings. After trying the above section, if the link is stilled failed, please do the steps listed below to make sure the network connection settings is OK. For Windows The example is based on Windows XP. As to the examples for other operation systems, please refer to the similar steps or find support notes in www.draytek.com. 1.
4. Select Obtain an IP address automatically and Obtain DNS server address automatically. For Mac OS 1. Double click on the current used Mac OS on the desktop. 2. Open the Application folder and get into Network. 3. On the Network screen, select Using DHCP from the drop down list of Configure IPv4.
4.3 Pinging the Router from Your Computer The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most important thing is that the computer will receive a reply from 192.168.1.1. If not, please check the IP address of your computer. We suggest you setting the network connection as get IP automatically. (Please refer to the section 4.2) Please follow the steps below to ping the router correctly.
4.4 Checking If the ISP Settings are OK or Not Open WAN>>Internet Access page and then check whether the ISP settings are set correctly. Use the Connection Type drop down list to choose Static IP/DHCP/PPPoE/PPTP/L2TP for reviewing the settings that you configured previously. 4.5 Forcing Vigor Router into TFTP Mode for Performing the Firmware Upgrade 1. Press and hold the Factory Reset button. The system will power off and power on the Vigor Router. 2.
Note: There are two firmware types. The .rst firmware format will make the configurations be back to default settings after upgrading firmware. The .all firmware format will remain the former configurations after upgrading firmware. 10. Input the Password if you have set one, then click Send. 11. There is a bar showing the upgrading process. 12. When the firmware upgrade is successful, the following window will pop up.
If the message of Request Timeout. Transfer Abort ! appears, please check if the connection between the computer and the Vigor is active or not. And, if the message of Incorrect/No file name. Transfer Abort ! appears, please check if the firmware you download is correct for your Vigor router. Note: Please turn off the Firewall protection while upgrading the firmware with Windows Vista. The Firewall function can be turned off via Control Panel >> Security Center >> Firewall.
4.6 Backing to Factory Default Setting If Necessary Sometimes, a wrong connection can be improved by returning to the default settings. Try to reset the router by software or hardware. Warning: After pressing factory default setting, you will loose all settings you did before. Make sure you have recorded all useful settings before you pressing. Software Reset You can reset the router to factory default via Web page. Go to System Maintenance and choose Reboot System on the web page.
