Draytek Vigor 130 manuale d’uso

Vigor130 Series User’s Guide i[...]

Vigor130 Series User’s Guide ii Vigor130 Series VDSL2/ADSL2/2+ Modem User’s Guide Version: 1.0 Firmware version: V3.7.1 (For future update, please visit Dray Tek web site) Date: 5/06/2013[...]

Vigor130 Series User’s Guide iii Copyright Information Copyright Declarations Copyright 2013 All rights reserved. This pub lication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language withou t written permission from the copyright [...]

Vigor130 Series User’s Guide iv European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town ship, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor130 DrayTek Corp. declares that Vigor130 is in compliance with the fo llowing essential requirements and other relevant pro visions of R &TTE D[...]

Vigor130 Series User’s Guide v T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s Introduction ................................................................................................. 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1 1.2 LED Indicato[...]

Vigor130 Series User’s Guide vi 3.2.4 Bind IP to MAC ........................................................................................................... .... 53 3.3 NA T ........................................................................................................................ ............... 55 3.3.1 Port Re direction ......[...]

Vigor130 Series User’s Guide vii Application a nd Exampl es ....................................................................... 132 4.1 LAN – Created by Using NA T ............................................................................................. 132 T rouble Shoot ing .............................................................[...]

[...]

Vigor130 Series User’s Guide 1 I I n n t t r r o o d d u u c c t t i i o o n n Vigor130 Series is a VDSL2/ADSL2/2+ modem. The object-based design used in SPI (Stateful Pack et Inspection) firewall allows users to set firewall policy with ease. It is flexible and makes your network be safe. By the way, DoS/DDoS prevention and URL content filter st[...]

Vigor130 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor modem, please get acquainted with the LED indicators and connectors first. LED Status Explanation Off The system is not ready or is failed. ACT Blinking The system is ready and[...]

Vigor130 Series User’s Guide 3 Interface Description DSL Connecter for accessing the In ternet through VDSL2/ADSL2/2+. LAN Connecter for local networked devices. Factory Reset Restore the default settings. Usage: Turn on the modem. Press the button and keep for more than 10 seconds. Then the modem will restart with the factory default configurati[...]

Vigor130 Series User’s Guide 4 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n This section will guide you to install the m odem through hardware connection and confi gure the modem’s settings through web browser. Before starting to configure the modem, you have to connect your devices correctly. 1. C[...]

Vigor130 Series User’s Guide 5 B B a a s s i i c c C C o o n n f f i i g g u u r r a a t t i i o o n n For using the modem properly, it is necessary for you t o change the password of web configuration for security and adjust primary basic settings. 2 2 . . 1 1 A A c c c c e e s s s s i i n n g g W W e e b b P P a a g g e e 1. Make sure your PC c[...]

Vigor130 Series User’s Guide 6 2 2 . . 2 2 C C h h a a n n g g i i n n g g P P a a s s s s w w o o r r d d Please change the password for the or iginal security of the modem. 1. Access into the web user interface of Vigor130. The Main Screen will appear as below. 2. Go to System Maintenance page and choose Administrator Password/User Password . 3[...]

Vigor130 Series User’s Guide 7 2 2 . . 3 3 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d Notice: Quick Start Wizard for user operation is the same as for administrator’s operation. The configuration provide here can help you to deploy and use the modem quickly. 2 2 . . 3 3 . . 1 1 S S e e t t t t i i n n g g P P P P P P o o E [...]

Vigor130 Series User’s Guide 8 3. You can configure the modem to access the Inte rnet with different protocol/modes such as PPPoE / PPPoA or MPoA/Static or Dynamic IP . The modem supports the ADSL WAN interface for Internet acce ss. In this case, choose PPPoE/PPPoA . Available parameters are listed below: Item Description For ADSL Only You have t[...]

Vigor130 Series User’s Guide 9 Item Description MPoA/Static or Dynamic IP . Default Gateway Assign an IP address to the gateway for the protocol of MPoA/Static or Dynamic IP . Primary DNS Assign an IP address to the primary DNS. Second DNS Assign an IP address to the secondary DNS. 4. After finished the above settings, click Next to access into n[...]

Vigor130 Series User’s Guide 10 5. Click Next for viewing summary of such connection. 6. Click Finish. The Quick Start Wizard Setup OK page will be displayed. 2 2 . . 3 3 . . 2 2 S S e e t t t t i i n n g g M M P P o o A A / / S S t t a a t t i i c c o o r r D D y y n n a a m m i i c c C C o o n n n n e e c c t t i i o o n n 1. Click Quick Start [...]

Vigor130 Series User’s Guide 11 3. You can configure the modem to access the Inte rnet with different protocol/modes such as PPPoE / PPPoA or MPoA/Static or Dynamic IP . The modem supports the ADSL WAN interface for Internet acce ss. In this case, choose MPoA/Static or Dynamic. Available parameters are listed below: Item Description For ADSL Only[...]

Vigor130 Series User’s Guide 12 Item Description MPoA/Static or Dynamic IP . Default Gateway Assign an IP address to the gateway for the protocol of MPoA/Static or Dynamic IP . Primary DNS Assign an IP address to the primary DNS. Second DNS Assign an IP address to the secondary DNS. 4. Click Next for viewing summary of such connection. 5. Click F[...]

Vigor130 Series User’s Guide 13 2 2 . . 4 4 I I n n t t r r o o d d u u c c i i n n g g D D a a s s h h b b o o a a r r d d The Dashboard (home page) shows the connection status including System Information, IPv 4 Internet Access, IPv6 Internet Access, Interface ( physical connection), Security and Quick Access. 2 2 . . 4 4 . . 1 1 V V i i r r t [...]

Vigor130 Series User’s Guide 14 2 2 . . 4 4 . . 2 2 N N a a m m e e w w i i t t h h a a L L i i n n k k A name with a link (e.g., Router Nam e , Current Time , WAN1/LAN and etc.) below means you can click it to open the configuration page for m odification. 2 2 . . 4 4 . . 3 3 Q Q u u i i c c k k A A c c c c e e s s s s f f o o r r C C o o m m m [...]

Vigor130 Series User’s Guide 15 2 2 . . 4 4 . . 4 4 G G U U I I M M a a p p All the functions the modem supports are listed with table clearly in this page. Users can click the function link to access into the se tting page of the function for detailed configuration. Click the icon on the top of th e main screen to display all the functions. 2 2 [...]

Vigor130 Series User’s Guide 16 2 2 . . 4 4 . . 6 6 C C o o n n f f i i g g B B a a c c k k u u p p There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file . Such configuration file can be restored by using System Maintenance>>Configuration Backup . Simpl[...]

Vigor130 Series User’s Guide 17 2 2 . . 5 5 O O n n l l i i n n e e S S t t a a t t u u s s 2 2 . . 5 5 . . 1 1 P P h h y y s s i i c c a a l l C C o o n n n n e e c c t t i i o o n n Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. If you select PPPoE as the prot[...]

Vigor130 Series User’s Guide 18 Item Description Line – Display the physical connection of this interface. Name – Display the name of the modem. Mode - Display the type of WAN connection (e.g., PPPoE). Up Time - Display the total uptime of the interface. IP - Display the IP address of the WAN interface. GW IP - Display the IP address of the d[...]

Vigor130 Series User’s Guide 19 Detailed explanation (for IPv6) is shown below: Item Description LAN Status IP Address - Displays the IPv6 address of the LAN interface.. TX Packets -Displays the total transmitted packets at the LAN interface. RX Packets -Displays the total received packets at the LAN interface. TX Bytes - Displays the speed of tr[...]

Vigor130 Series User’s Guide 20 Detailed explanation is shown below: Item Description WAN Status Enable – Yes in red means such interface is available but not enabled. Yes in green means such interface is enabled. Line – Display the physical connection (Ethernet, or USB) of this interface. Name – Display the name of the modem. Mode - Displa[...]

Vigor130 Series User’s Guide 21 2 Click Support Area>>Production Registration from the home page. 3 A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login . If not, please click Create an account now link first to create a new account. Then, back to this setting page. 4 Th[...]

Vigor130 Series User’s Guide 22 5 When the following page appears, please type in Nickname (for the modem) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the m odem, please click Submit . 6 When the following page appears, your m od[...]

Vigor130 Series User’s Guide 23 A A d d v v a a n n c c e e d d C C o o n n f f i i g g u u r r a a t t i i o o n n This chapter will guide users to execute advanced (full) configuration. As for other exam ples of application, please refer to chapter 5. 1. Open a web browser on your PC and type http://192. 168.1.1. The window will ask for typing [...]

Vigor130 Series User’s Guide 24 W W h h a a t t a a r r e e P P u u b b l l i i c c I I P P A A d d d d r r e e s s s s a a n n d d P P r r i i v v a a t t e e I I P P A A d d d d r r e e s s s s As the modem plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by [...]

Vigor130 Series User’s Guide 25 Physical Mode Display the physical mode of such WAN interface. DSL Mode Specify which DSL mode can be used for such WAN connection. Auto – The system will choose the suitable one automatically. VLAN Tag insertion Enable – Enable the function of VLAN with tag. The modem will add specific VLAN number to all packe[...]

Vigor130 Series User’s Guide 26 3 3 . . 1 1 . . 3 3 P P P P P P o o E E / / P P P P P P o o A A PPPoA, included in RFC1483, can be operated in either Logical Link Control-Subnetwork Access Protocol or VC-Mux mode. As a CPE device, Vigor modem encapsulates the PPP session based for transport across the ADSL loop and your ISP’s Digital Subscriber[...]

Vigor130 Series User’s Guide 27 provided by ISP. Protocol - Drop down the list to choose the protocol, P PPoE or PPPoA. Modulation – Choose a suitable method for PPPoE/PPoA connection. PPPoE Pass-through The modem offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection directly from local clients to your ISP via th[...]

Vigor130 Series User’s Guide 28 is active only when the Active on demand option for Active Mode is selected in WAN>> General Setup page. IP Address From ISP Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you [...]

Vigor130 Series User’s Guide 29 Cable service provider will offer a fixed public IP, while a DSL service provider will offer a public subnet. If you have a public subnet, you could assign an IP address or many IP address to the WAN interface. To use MPoA /Static or dynamic IP as the accessing protocol of the Internet, select MPoA mode. The follow[...]

Vigor130 Series User’s Guide 30 PPPoA. Modulation – Choose a suitable method for PPPoE/PPoA connection. VLAN Enable Enable the function of VLAN with tag. The modem will add specific VLAN number to all packets while sending them out. Please type the tag value and specify the priority for the packets sending by the modem. VLAN ID –Type the valu[...]

Vigor130 Series User’s Guide 31 IP Address – Type in the private IP address. Subnet Mask – Type in the subnet mask. Gateway IP Address – Type in gateway IP address. Default MAC Address Type in MAC address for the modem. You can use Default MAC Address or specify another MAC address for your necessity. MAC Address – Type in the MAC address[...]

Vigor130 Series User’s Guide 32 No need to type any other information for PPP m ode. Below shows an example for successful IPv6 connection based on PPPoE mode. Note : At present, the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiw an (hinet), the Netherlands, Australia and UK. T T S S P P C [...]

Vigor130 Series User’s Guide 33 Available settings are explained as follows: Item Description Username Type the name obtained from the broker. It is suggested for you to apply another usernam e and password for http://gogonet.gogo6.com/ page/freenet6-account . Password Type the password assigned with the user name. Confirm Password Type the passw[...]

Vigor130 Series User’s Guide 34 Item Description Always The IPv6 network connection will be always on when this box is checked. Username Type the name obtained from the broker. Please apply new account at http://www.sixxs.net/ . It is suggested for you to apply another username and password. Password Type the password assigned with the user name.[...]

Vigor130 Series User’s Guide 35 Available settings are explained as follows: Item Description Static IPv6 Address configuration IPv6 Address – Type the IPv6 Static IP Address. Prefix Length – Type the fixed value for prefix length. Add – Click it to add a new entry. Delete – Click it to remove an existed entry. Current IPv6 Address Table [...]

Vigor130 Series User’s Guide 36 3 3 . . 1 1 . . 6 6 M M u u l l t t i i - - P P V V C C s s This modem allows you to create multi-PVCs for different data transferring for using. Simply go to Internet Access and select Multi-PVC Setup page. G G e e n n e e r r a a l l The system allows you to set up to eight cha nnels which are ready for choosing [...]

Vigor130 Series User’s Guide 37 Protocol Select a proper protocol for this channel. Encapsulation Choose a proper type for this channel. The types will be different according to the protocol setting that you choose. WAN link for Channel 3, 4 and 5 are provided f or modem-borne application such as TR-069 and VoIP. The settings must be applied and [...]

Vigor130 Series User’s Guide 38 Available settings are explained as follows: Item Description WAN for Router-borne Application Choose the modem service for channel 5, 6 or 7. Management - It can be specified for general management (Web configuration/telnet/TR-069). If you choose Management, the configuration for this PV C will be effective for We[...]

Vigor130 Series User’s Guide 39 Available settings are explained as follows: Item QoS Type Description Select a proper QoS type for the channel according to the information that your ISP provides. PCR It represents Peak Cell R ate. The default setting is “0”. SCR It represents Sustainab le Cell Rate. The value of SCR must be smaller than PCR.[...]

Vigor130 Series User’s Guide 40 3 3 . . 1 1 . . 7 7 M M u u l l t t i i - - V V L L A A N N This modem allows you to create multi-VLAN fo r different purposes of data transferring. Simply go to WAN and select Multi-VLAN . Available settings are explained as follows: Item Description Enable Check it to enable such function. Channel Display the num[...]

Vigor130 Series User’s Guide 41 Available settings are explained as follows: Item Description WAN for Router-borne Application Choose the modem service for channel 3, 4 or 5. Management - It can be specified for general management (Web configuration/telnet/TR069). If you choose Management, the configuration for this VLAN will be effective for Web[...]

Vigor130 Series User’s Guide 42 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by modem. The design of network structure is related to what t ype of public IP addresses com ing from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor modem is NA[...]

Vigor130 Series User’s Guide 43 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor modem will exchange routing informati on with neighboring modems using the RIP to accomplish IP routing. This allows users to ch ange the information of the mode[...]

Vigor130 Series User’s Guide 44 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Open LAN>>General Setup . D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 1 1 – – E E t t h h e e r r n n e e t t T T C C P P / / I I P P a a n n d d D D H H C C P P[...]

Vigor130 Series User’s Guide 45 z S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your modem is 220.135.240.1, the starting IP address must be 220.135.240.2 or greater , but smaller than 220.135.240. 254. z IP Pool Counts: Enter the number of IP addresse[...]

Vigor130 Series User’s Guide 46 you to redirect the DHCP request to the specified location. Enable Server - Let the modem assign IP address to every host in the LAN. Disable Server – Let you manually assign IP address to every host in the LAN. Relay Agent – (1 st subnet/2 nd subnet) Specify which subnet that DHCP server is located the relay a[...]

Vigor130 Series User’s Guide 47 Different number means different meaning. Please contact with your ISP for obtaining the correct num ber value. DataType – Choose the type (ASCII or Hex) for the data to be calculated. Data – Type the content of the data to be processed by the function of DHCP option. DNS Server IP Address DNS stands for Domain[...]

Vigor130 Series User’s Guide 48 It provides 2 daemons for LAN side IPv6 address configuration. One is RA DVD (stateless) and the other is DHCPv6 Server (Stateful). Available settings are explained as follows: Item Description RADVD Configuration Enable – Click it to enable RADVD server. The modem advertisement daemon (radvd) sends Router Advert[...]

Vigor130 Series User’s Guide 49 Disable Server –Click it to disable DHCPv6 server. Start IPv6 Address / End IPv6 Address –Type the start and end address for IPv6 server. DNS Server IPv6 Address Primary DNS Sever – Type the IPv6 address for Primary DNS server. Secondary DNS Server –Type another IPv6 address for DNS server if required. Stat[...]

Vigor130 Series User’s Guide 50 Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i c c R R o o u u t t e e s s t t o o P P r r i i v v a a t t e e a a n n d d P P u u b b l l i i c c N N e e t t w w o o r r k k s s ( ( b b a a s s e e d d o o n n I I P P v v 4 4 ) ) Here is an example of setting S[...]

Vigor130 Series User’s Guide 51 Note: There are two reasons that we have to appl y RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring modems via the 1st subnet ( 192.168.1.0/24). The second is that those hosts on the internal private subnets (e x. 192.168.10.0/24) can access th[...]

Vigor130 Series User’s Guide 52 S S t t a a t t i i c c R R o o u u t t e e f f o o r r I I P P v v 6 6 You can set up to 40 profiles for IPv6 static route. Click the IPv6 tab to o pen the following page: Available settings are explained as follows: Item Description Index The number (1 to 40) unde r Index allows you to open next page to set up st[...]

Vigor130 Series User’s Guide 53 Available settings are explained as follows: Item Description Enable Click it to enable this profile. Destination IPv6 Address / Prefix Len T ype the IP address with the prefix length for this entry . Gateway IPv6 Address T ype the gateway address for this entry . Network Interface Use the drop down list to specify[...]

Vigor130 Series User’s Guide 54[...]

Vigor130 Series User’s Guide 55 Available settings are explained as follows: Item Description Enable Click this radio button to invoke t his function. However, IP/MAC which is not listed in IP Bind List also can connect to Internet. Disable Click this radio button to disable this function. All the settings on this page will be invalid. Strict Bin[...]

Vigor130 Series User’s Guide 56 Public IP address is usually assigned by your ISP, for which you may get charged. Private IP addresses are recognized only among internal hosts. When the outgoing packets destined to some public server on the Internet reach the NAT modem, the modem will change its source address into the public IP address of the mo[...]

Vigor130 Series User’s Guide 57 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-m apping entries for the internal hosts. Each item is explained as follows: Item Description Index Display the number of the profile.[...]

Vigor130 Series User’s Guide 58 Protocol Display the transport layer protocol (TCP or UDP). Public Port Display the port number which will be redirected to the specified Private IP and Port of the internal host. Private IP Display the IP address of the internal host providing the service. Status Display if the profile is enabled (v) or not (x). P[...]

Vigor130 Series User’s Guide 59 Private IP Specify the private IP address of the internal host providing the service. If you choose Range as the port redirection mode, you will see two boxes on this field. Type a complete IP address in the first box (as the starting point) and the fourth digit s in the second box (as the end point). Private Port [...]

Vigor130 Series User’s Guide 60 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: Available settings are explained as follows: Item Description Choose Private IP or Active True IP first. Active Tr[...]

Vigor130 Series User’s Guide 61 up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network. Select one private IP address in the list to be the DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting[...]

Vigor130 Series User’s Guide 62 Choose PC Click this button and then a wi ndow will autom atically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network. Select one private IP address in the list to be the DMZ host. When you have selected one private IP from the above dialog, the IP addr[...]

Vigor130 Series User’s Guide 63 Comment Specify the name for the defined network service. WAN Interface Display the WAN interface used by such index. Aux. WAN IP Display the IP address defined in WAN Alias for PPPoE/PPPoA or MPoA mode. Local IP Address Display the private IP address of the local host offering the service. Status Display the state[...]

Vigor130 Series User’s Guide 64 Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. After finishing all the settings here, please click OK to save the configuration. 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B [...]

Vigor130 Series User’s Guide 65 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a p acket based on the information in its header, stateful inspect[...]

Vigor130 Series User’s Guide 66 For example, an ActiveX control object is usually used for providin g interactive web feature. If malicious code hides inside, it may occupy user’s system. D D e e n n i i a a l l o o f f S S e e r r v v i i c c e e ( ( D D o o S S ) ) D D e e f f e e n n s s e e The DoS Defense functionality helps you to detect [...]

Vigor130 Series User’s Guide 67 Available settings are explained as follows: Item Description Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Accept large incoming… Some on-l[...]

Vigor130 Series User’s Guide 68 Available settings are explained as follows: Item Description Filter Select Pass or Block for the packets that do not match with the filter rules. Sessions Control The number typed here is the total sessions of the packets that do not match the filter rule configured in this page. The default setting is 60000. URL [...]

Vigor130 Series User’s Guide 69 Advance Setting Click Edit to open the following window . However , it is strongly r ecommended to use the default settings here. Codepage - This function is used to com pare the characters among dif ferent languages. Choose correct codepage can help the system obtaining correct ASCII after decoding data from URL a[...]

Vigor130 Series User’s Guide 70 3 3 . . 4 4 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule num ber button to ed[...]

Vigor130 Series User’s Guide 71 Available settings are explained as follows: Item Description Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index(1-15) Set PCs on LAN to work at certain time interval only. You may choose up to 4 sched[...]

Vigor130 Series User’s Guide 72 To set the IP address manually, please choose Any Address/Single Address/ Range Address/Subnet Address as the Address Type and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type. From the IP Group drop down list,[...]

Vigor130 Series User’s Guide 73 Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port – (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this service type. (!=) – when the first[...]

Vigor130 Series User’s Guide 74 be bound for applying such filter rule. No-Strict - no limitation. URL Conten t Filter Select one of the URL Con tent Filter profile settings (created in CSM>> URL Content Filter ) for applying with this modem. Please set at least one profile for choosing in CSM>> URL Content Filter web page first. Or c[...]

Vigor130 Series User’s Guide 75 Window size – It determines the size of TCP protocol (0~65535). T he more the value is, the better the performance will be. However , if the network is not stable, small value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources. However , Queue timeo[...]

Vigor130 Series User’s Guide 76 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is composed by 7 filter rules, which can be f[...]

Vigor130 Series User’s Guide 77 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Available settings a[...]

Vigor130 Series User’s Guide 78 will start to randomly discard the subsequent UDP packets for a period defined in Timeout. The default setting for threshold and timeout are 150 packets per second and 10 seconds, respectively. That means, when 150 packets per second received, they will be regarded as “attack event” and the session will be paus[...]

Vigor130 Series User’s Guide 79 Any broadcast UDP packets received from the Internet is blocked. Activating the DoS/DDoS defense functionality might block some legal packets. For example, when you act ivate the fraggle attack defense, all broadcast UDP packets coming from the Internet are blocked. Therefore, the RIP packets from the Internet migh[...]

Vigor130 Series User’s Guide 80[...]

Vigor130 Series User’s Guide 81 3 3 . . 5 5 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range and service ports in a limited range usually will be applied in configuri ng modem’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/gro[...]

Vigor130 Series User’s Guide 82 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface. For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for [...]

Vigor130 Series User’s Guide 83 Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Subnet Mask Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the IP addresses except the ones listed above will be appl[...]

Vigor130 Series User’s Guide 84 Index Display the profile number that you can configure. Name Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index co lum n for configuration in details. 2. The configuration page will be shown as follows: Available settings are ex[...]

Vigor130 Series User’s Guide 85 3 3 . . 5 5 . . 3 3 I I P P v v 6 6 O O b b j j e e c c t t You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of [...]

Vigor130 Series User’s Guide 86 Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Address Type Determine the address type for the IPv6 address. Select Single Address if this object contains one IPv6 address only. Select Range Address if this object contains several [...]

Vigor130 Series User’s Guide 87 3 3 . . 5 5 . . 4 4 I I P P v v 6 6 G G r r o o u u p p This page allows you to bind several IPv6 objects into one IPv6 group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of th[...]

Vigor130 Series User’s Guide 88 Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Available IPv6 Objects All the available IPv6 objects with the specified interface chosen above will be shown in this box. Selected IPv6 Objects Click >> button to add the selected IPv6 objects in this box. 3. After finishi[...]

Vigor130 Series User’s Guide 89 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index co lum n for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are all[...]

Vigor130 Series User’s Guide 90 3. After finishing all the settings, please click OK to save the configuration. 3 3 . . 5 5 . . 6 6 S S e e r r v v i i c c e e T T y y p p e e G G r r o o u u p p This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default [...]

Vigor130 Series User’s Guide 91 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Group column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allow[...]

Vigor130 Series User’s Guide 92 3 3 . . 5 5 . . 7 7 K K e e y y w w o o r r d d O O b b j j e e c c t t You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the [...]

Vigor130 Series User’s Guide 93 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index co lum n for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile, e.g., game. Maximum 15 charac[...]

Vigor130 Series User’s Guide 94 3 3 . . 5 5 . . 8 8 K K e e y y w w o o r r d d G G r r o o u u p p This page allows you to bind several keywor d object s into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL /Web Content Filter Profile . Available settings are explained as follows: Item Description Se[...]

Vigor130 Series User’s Guide 95 Item Description Name Type a name for this group. Maximum 15 characters are allowed. Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects Click button to[...]

Vigor130 Series User’s Guide 96 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Profile colum n for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Profile Name Type a name for this profile. The maximum length o[...]

Vigor130 Series User’s Guide 97 URL Content Filter work better than traditional firewall in the field of filtering? Because it checks the URL strings or some of HTTP data hiding in the pa yload of TCP packets while legacy firewall inspects packets based on the fields of TCP/IP headers only. On the other hand, Vigor modem can prevent user from acc[...]

Vigor130 Series User’s Guide 98 Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. The maximum length of the name you can set is 15 characters. Priority It determines the action that this modem will apply. Both: Pass – The modem will let all the packages that match with the conditions spe[...]

Vigor130 Series User’s Guide 99 Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass w ill be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. URL Access Control Enable URL Access Control - Check [...]

Vigor130 Series User’s Guide 100 should be noticed that the more sim plified the blocking keyword list is, the more efficiently the Vigor modem performs. Web Feature Enable Restrict Web Feature - Check this box to make the keyword being blocked or passed. Action - This setting is available only when Either: URL Access Control First or Either: Web[...]

Vigor130 Series User’s Guide 101 After finishing all the settings, please click OK to save the configuration. 3 3 . . 7 7 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 7 7 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to[...]

Vigor130 Series User’s Guide 102 Item Description Enable Dynamic DNS Setup Check this box to enable DDNS function. Set to Factory Default Clear all profiles and recover to factory settings. View Log Display DDNS log status. Force Update Force the modem updates its information to DDNS server. Auto-Update interval Set the time for the modem to perf[...]

Vigor130 Series User’s Guide 103 Domain Name Type in one domain name that you appli ed previously. Use the drop down list to choose the desired domain. Login Name Type in the login name that you set for applying domain. Password Type in the password that you set for applying domain. Wildcard and Backup MX The W ildcard and Backup MX (Mail Exchang[...]

Vigor130 Series User’s Guide 104 modem’s clock. This method can only be app lied when the WAN connection has been built up. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles and recover to factory settings. Index Click the number below Index to access into the setting page of schedule. Statu[...]

Vigor130 Series User’s Guide 105 Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply during the period of the schedule. Force On - Force the co[...]

Vigor130 Series User’s Guide 106 3 3 . . 7 7 . . 3 3 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT modems,[...]

Vigor130 Series User’s Guide 107 The UPnP facility on the modem enables UPnP aware applications such as MSN Messenger to discover what are behind a NA T modem. The application will also learn the external IP address and configure port mappings on the mode m. Subsequently , such a facility forwards packets from the external ports of the modem to t[...]

Vigor130 Series User’s Guide 108 The UPnP function dynamically adds port ma ppings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. 3 3 . . 7 7 . . 4 4 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol . It is a communication protocol which is ma[...]

Vigor130 Series User’s Guide 109 3 3 . . 8 8 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items for Sys[...]

Vigor130 Series User’s Guide 110 - Display the subnet mask address of the LAN interface. DHCP Server - Display the current status of DHCP server of the LAN interface DNS - Display the assigned IP address of the primary DNS. WAN Link Status - Display current connection status. MAC Address - Display the MAC address of the WAN Interface. Connection [...]

Vigor130 Series User’s Guide 111 3 3 . . 8 8 . . 2 2 T T R R - - 0 0 6 6 9 9 This device supports TR-069 standard. It is very convenient for an administrator to m anage a TR-069 device through an Auto Configuration Server, e.g., VigorACS. Available settings are explained as follows: Item Description ACS Server On Choose the interface for the mode[...]

Vigor130 Series User’s Guide 112 Or click Disable to close the mechanism of notification. STUN Settings The default is Disable . If you click Enable , please type the relational settings listed below: Server IP – Type the IP address of the STUN server. Server Port – Type the port number of the STUN server. Minimum Keep Alive Period – If STU[...]

Vigor130 Series User’s Guide 113 3 3 . . 8 8 . . 4 4 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u p p B B a a c c k k u u p p t t h h e e C C o o n n f f i i g g u u r r a a t t i i o o n n Follow the steps below to backup your configuration . 1. Go to System Maintenance >> Configuration Backup . The following win[...]

Vigor130 Series User’s Guide 114 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating exam ples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available. Note: Backup for Certifi[...]

Vigor130 Series User’s Guide 115 3 3 . . 8 8 . . 5 5 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor modem. There is no bother to directly get into the Web User Interface of the modem or borrow debug equ ipments. Available settings are explained as follows: Item Description SysLog A[...]

Vigor130 Series User’s Guide 116 Authentication - Check this box to activate this function while using e-mail application. User Name - Type the user name for authentication. Password - Type the password for authentication. Enable E-mail Alert - Check the box to send alert message to the e-mail box while the modem detects the item you specify here[...]

Vigor130 Series User’s Guide 117 3 3 . . 8 8 . . 6 6 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the modem should be inq uired from. Available settings are explained as follows: Item Description Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the[...]

Vigor130 Series User’s Guide 118 3 3 . . 8 8 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. The management pages for IPv4 and IPv6 protocols are different. F F o o r r I I P P v v 4 4 Available settings are explained as follows: Item Descrip[...]

Vigor130 Series User’s Guide 119 Default Ports - Check to use standard port numbers for the Telnet and HTTP servers. SNMP Enable SNMP Agent - Check it to enable this function.. Get Community - Set the name for getting community by typing a proper character. The default setting is public. Set Community - Set community by typing a proper name. The [...]

Vigor130 Series User’s Guide 120 allowed to login to the modem. 3 3 . . 8 8 . . 8 8 R R e e b b o o o o t t S S y y s s t t e e m m The Web User Interface may be used to restart your modem. Click Reboot System from System Maintenance to open the following page. Index (1-15) in Schedule Setup - You can type in four sets of time schedule for perfor[...]

Vigor130 Series User’s Guide 121 3 3 . . 8 8 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your modem firmware, you need to install the Modem Tools. The Firmware Upgrade Utility is included in the tools. Th e following web page will guide you to upgrade firmware by using an example. No te that this example i[...]

Vigor130 Series User’s Guide 122 3 3 . . 9 9 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor modem. Below shows the menu items for Diagnostics. 3 3 . . 9 9 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r i i n n g g Click Diagnostics and click Dial-[...]

Vigor130 Series User’s Guide 123 3 3 . . 9 9 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page.[...]

Vigor130 Series User’s Guide 124 3 3 . . 9 9 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content of the ARP (Address Resolution Protocol) cache held in the mode m. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Available settin[...]

Vigor130 Series User’s Guide 125 Item Description Refresh Click it to reload the page. 3 3 . . 9 9 . . 5 5 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open t[...]

Vigor130 Series User’s Guide 126 HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. 3 3 . . 9 9 . . 6 6 N N A A T T S S e e s s s s i i o o n n s s T T a a b b l l e e Click Diagnostics and click NAT Sessions Table to open the list page. Available settings are explained as follows: Item Description Priv[...]

Vigor130 Series User’s Guide 127 3 3 . . 9 9 . . 7 7 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Available settings are explained as follows: Item Description IPV4 /IPV6 Choose the interface for such function. Ping through Use the drop down list to choose the WAN interface th[...]

Vigor130 Series User’s Guide 128 Clear Click this link to remove the result on the window. 3 3 . . 9 9 . . 8 8 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. Click Diagnostics and click Data Flow Monitor to [...]

Vigor130 Series User’s Guide 129 RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display the session number that you specified in Limit Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock – the device with the IP address will be blocked in five minutes. The rem[...]

Vigor130 Series User’s Guide 130 3 3 . . 9 9 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from modem to the host. Simply type the IP address of the host in the box and click Run . The result of route trace will be shown on the screen. or Avai[...]

Vigor130 Series User’s Guide 131 Host/IP Address It indicates the IP address of the host. Trace Host/IP Address It indicates the IPv6 address of the host. Run Click this button to start route tracing work. Clear Click this link to remove the result on the window. 3 3 . . 9 9 . . 1 1 0 0 T T S S P P C C S S t t a a t t u u s s IPv6 TSPC status web[...]

Vigor130 Series User’s Guide 132 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor modem private IP address/[...]

Vigor130 Series User’s Guide 133 T o use another DHCP server in the network rath er than the built-in one of V igor Modem, you have to change the settings as show below .[...]

Vigor130 Series User’s Guide 134[...]

Vigor130 Series User’s Guide 135 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the modem and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Checkin[...]

Vigor130 Series User’s Guide 136 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong netw ork[...]

Vigor130 Series User’s Guide 137 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configure[...]

Vigor130 Series User’s Guide 138 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e M M o o d d e e m m f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the modem is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the modem. The most important thi[...]

Vigor130 Series User’s Guide 139 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click Internet Access group and then check whether the ISP settings are set correctly. 5 5 . . 5 5 B B a a c c k k i i n n g g t t o o F F a a c c t t o o r r y y D D [...]

Vigor130 Series User’s Guide 140 H H a a r r d d w w a a r r e e R R e e s s e e t t While the modem is running, press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the modem will restart with the default configuration. After restore the factory default setting[...]