Draytek VIGOR2910 manual

Vigor2910 Dual-WAN Security Router User’s Guide Version: 2.0 Date: 2006/7/24 Copyright 2006 All rights reserve d. This publication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval syst em, or translated into any lang u age without written permission from the copyright[...]

Vigor2910 Series User’s Guide ii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1 1.[...]

Vigor2910 Series User’s Guide iii 3.4.6 Web Cont ent F ilter ....................................................................................................... ... 61 3.4.6 Bind IP to MAC ........................................................................................................... .... 62 3.5 Object s Settings .................[...]

Vigor2910 Series User’s Guide iv 3.13.2 Administra tor Password .............................................................................................. 144 3.13.3 Configurat ion Backup ................................................................................................. 144 3.13.4 Syslog/M ail Al ert ...........................[...]

Vigor2910 Series User’s Guide 1 1 P P r r e e f f a a c c e e The Vigor2910 series router provides Dual-WAN interface (which is a configuration second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (SuperG TM ). Object-oriented fire[...]

Vigor2910 Series User’s Guide 2 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 L L E E D D E E x x p p l l a a n n a a t t i i o o n n A CT DMZ QoS Attack VPN Printer WAN W2 P1 / P2 P3 P4 LAN W1 LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powered of f. DM[...]

Vigor2910 Series User’s Guide 3 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n A CT DMZ QoS Attack WLAN Printer WAN W2 P1 / P2 P3 P4 LAN W1 LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe red off[...]

Vigor2910 Series User’s Guide 4 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V L L E E D D E E x x p p l l a a n n a a t t i i o o n n A CT DMZ VPN Printer P2 P3 P4 LAN FXS1 FXS2 Phone WAN W2 P1 / W1 LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe re[...]

Vigor2910 Series User’s Guide 5 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n A CT DMZ WLAN Prin ter P2 P3 P4 LAN FXS1 FXS2 Phone WAN W2 P1 / W1 LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is p [...]

Vigor2910 Series User’s Guide 6 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect this device to a router/modem with an Ethernet cable. 2. Connect one port of 4-port switch to your computer with a RJ-45 cable. [...]

Vigor2910 Series User’s Guide 7 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator and h[...]

Vigor2910 Series User’s Guide 8 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type a new one in the field of New Password and retype it on the field of Retype New Password . Then click OK to continue. 6. Now, the password has been changed. Ne[...]

Vigor2910 Series User’s Guide 9 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After ty ping the password[...]

Vigor2910 Series User’s Guide 10 In the Quick Start Wizard , you can configure the router to access the Internet with different protocol/modes such as PPPoE , PPTP , Static IP or DHCP . The router supports the DSL WAN interface for Internet access. 2 2 . . 2 2 . . 1 1 P P P P P P o o E E PPPoE stands for Point-to-Point Protocol over Ethernet . It[...]

Vigor2910 Series User’s Guide 11 Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.[...]

Vigor2910 Series User’s Guide 12 2 2 . . 2 2 . . 2 2 P P P P T T P P Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.[...]

Vigor2910 Series User’s Guide 13 2 2 . . 2 2 . . 3 3 S S t t a a t t i i c c I I P P Click Static IP as the protocol. Type in all the inform ation that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the [...]

Vigor2910 Series User’s Guide 14 2 2 . . 2 2 . . 4 4 D D H H C C P P Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this [...]

Vigor2910 Series User’s Guide 15 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE as the protocol, you will find out a button of Dial PPPoE or Dial PPPoE i n the Online Status web page. O[...]

Vigor2910 Series User’s Guide 16 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface.[...]

Vigor2910 Series User’s Guide 17 2 2 . . 4 4 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your setti[...]

Vigor2910 Series User’s Guide 18 This page is left blank.[...]

Vigor2910 Series User’s Guide 19 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed infor[...]

Vigor2910 Series User’s Guide 20 Below shows the menu items for Internet Access. 3 3 . . 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This section will introduce some general settings of Internet and explain the connection modes for WAN1 and WAN2 in details. This router supports dual WAN function. It allows users to access Internet[...]

Vigor2910 Series User’s Guide 21 Physical Type You can change the physical type for W AN2 or choose Auto negotiation for determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the best[...]

Vigor2910 Series User’s Guide 22 For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly. Index It shows the WAN modes that this router supports. WAN1 is the default WAN[...]

Vigor2910 Series User’s Guide 23 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E To use PPPoE as the accessing protocol of the internet, please choose Internet Acce ss fro m WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown. PPPoE Client Mode Click Enable for activating this function. If [...]

Vigor2910 Series User’s Guide 24 Always On - If the broadband connection is no longer available, the backup line will be activated automatically and always on until the broadband connection is restored. We recommend you to enable this feature if you host a web server for your customers’ access. PPP/MP Setup PPP Authentication – Select PAP onl[...]

Vigor2910 Series User’s Guide 25 For static IP mode, you usually receive a fixe d public IP address or a public subnet, nam ely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service provider will offer a public subnet. If you have a publ[...]

Vigor2910 Series User’s Guide 26 enable this feature if you host a web server for your customers’ access. Keep WAN Connection Normally, this function is designed for Dynamic IP environments because some ISPs will drop connections if there is no traffic within certain periods of time. Check Enable PING to keep alive box to activate this function[...]

Vigor2910 Series User’s Guide 27 specific MAC address for access authentication. In such cases y ou need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. DNS Server IP Address Type in the primary IP address for the router if you want to use Static IP mode. If necessary, type in secondary IP address for necess[...]

Vigor2910 Series User’s Guide 28 Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. Always On - If the broadband connection is no longer available, the backup line will be activated automatically and always on until the broadband connection is restored. We recommend you to en[...]

Vigor2910 Series User’s Guide 29 WAN IP Network Settings Obtain an IP address automatically – Click this button to obtain the IP address automatically. Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. 3 3 . . 1 1 . . 4 4 L L o o a a d d - - B B a a [...]

Vigor2910 Series User’s Guide 30 Dest IP End Displays the IP address for the end of the destination IP. Dest Port Start Displays the IP address for the start of the destination port. Dest Port End Displays the IP address for the end of the destination port. Click Index 1 to access into the following page for configuring load-balance policy. Enabl[...]

Vigor2910 Series User’s Guide 31 Dest Port End Type the destination port end for the destination IP. If this field is blank, it means that all the destination ports will be passed through the WAN interface.[...]

Vigor2910 Series User’s Guide 32 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router is[...]

Vigor2910 Series User’s Guide 33 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the r[...]

Vigor2910 Series User’s Guide 34 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask T [...]

Vigor2910 Series User’s Guide 35 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.2 or greater , but smaller than 220.135.240. 254. IP Pool Counts: Enter the number of IP addresses[...]

Vigor2910 Series User’s Guide 36 DHCP Server IP Addr ess for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Internet host must have a unique IP address, also they may have a human[...]

Vigor2910 Series User’s Guide 37 Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i c c R R o o u u t t e e s s t t o o P P r r i i v v a a t t e e a a n n d d P P u u b b l l [...]

Vigor2910 Series User’s Guide 38 is that those hosts on the intern al private subnets (ex. 192.168.10.0/24) can access the Internet via the router , and continuously exchange of IP routing information with dif ferent subnets. 2. Click the LAN - S tatic Route and click on the Index Number 1. Check the Enable box. Please add a static route as shown[...]

Vigor2910 Series User’s Guide 39 2. Select Empty/Clear from the drop-down menu, and then click the OK button to delete the route. D D i i s s a a b b l l e e S S t t a a t t i i c c R R o o u u t t e e 1. Click the Index Number that you want to disable from the St a t i c R o u t e Configuration page. 2. Select Inactive/Disable from the drop-down[...]

Vigor2910 Series User’s Guide 40 3 3 . . 3 3 . . 1 1 P P o o r r t t R R e e d d i i r r e e c c t t i i o o n n Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc. Most of the case, you need a public IP address for each server and this public IP addre[...]

Vigor2910 Series User’s Guide 41 Mode Two options are provided here for you to choose. To set a range for the specific service, select Range. Service Name Enter the description of the specific network service. Protocol Select the transport layer protocol (TCP or UDP). Public Port Specify which port can be redirected to the specified Private IP an[...]

Vigor2910 Series User’s Guide 42 3 3 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (A H), do not travel on a fixed por[...]

Vigor2910 Series User’s Guide 43 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias in Internet Access>>PPPoE/PPPoA or Internet Access>>MPoA, y o[...]

Vigor2910 Series User’s Guide 44 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open[...]

Vigor2910 Series User’s Guide 45 WAN Interface Display the WAN interface for the entry. Local IP Address Display the private IP address of the local host offering the service. Status Display the state for the corresponding entry. X or V is to represent the Inactive or Active state. To add or edit port settings, click one index number on the page.[...]

Vigor2910 Series User’s Guide 46 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor[...]

Vigor2910 Series User’s Guide 47 Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter . z Call Filter - When there is no existing Internet connection, Call Filter is applied to all traffic, all [...]

Vigor2910 Series User’s Guide 48 C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n t t ( ( C C S S M M ) ) As the popularity of all kinds of instant messenger application arises, communication cannot become much easier. Nevertheless, while some i ndustry may leverage this as a great tool to connect wi[...]

Vigor2910 Series User’s Guide 49 W W e e b b F F i i l l t t e e r r i i n n g g We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible pare nt or employer, you should protect those in your trust against the hazards. With Web filtering service of the Vigor router, you can prote[...]

Vigor2910 Series User’s Guide 50 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Log Flag For troubleshooting needs you can specify the filter log here. None - The log function[...]

Vigor2910 Series User’s Guide 51 3 3 . . 4 4 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule num ber button to e[...]

Vigor2910 Series User’s Guide 52 Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index(1-15) Set the PCs on LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 sc hedules pre-defined in Applications[...]

Vigor2910 Series User’s Guide 53 range from defined groups or objects, please choose Group and Objects as the Address Type. From the IP Group drop down list, choose the one that you want to apply. Or use the IP Object drop down list to choose the object that you want. Service Type Click Edit to access into the following dialog to choose a suitabl[...]

Vigor2910 Series User’s Guide 54 Fragments Specify the action for fragmented packets. And it is used for Data Filter only. Don’t care - No action will be taken towards fragmented packets. Unfragmented - Apply the rule to unfragmented packets. Fragmented - Apply the rule to fragmented packets. Too Short - Apply the rule only to packets that are [...]

Vigor2910 Series User’s Guide 55[...]

Vigor2910 Series User’s Guide 56 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defense [...]

Vigor2910 Series User’s Guide 57 port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router will ignore any IP packets with IP option field in the datagram header. The r[...]

Vigor2910 Series User’s Guide 58 SYN packets with the identical s ource and destination addresses, as well as the port number to victims. Block Unknown Protocol Check the box to activate the Block Unknown Protocol function. Individual IP packet has a protocol field in the datagram header to indicate the protocol type running over the upper layer.[...]

Vigor2910 Series User’s Guide 59 For example, if you add key words such as “s ex”, Vigor router will limit web access to web sites or web pages such as “www.sex.com ”, ”www.backdoor.net/images/sex/p_386.html”. Or you may simply specify the full or partial URL such as “www.sex.com” or “sex.com”. Also the Vigor router will disca[...]

Vigor2910 Series User’s Guide 60 from IP address such as http://202.6.3.2. The reason for this is to prevent some one dodges the URL Access Control. Y ou must clear your browser cache first so that the URL content filtering facility operates properly on a web page that you visited before. Enable Restrict Web Feature Check the box to activate the [...]

Vigor2910 Series User’s Guide 61 3 3 . . 4 4 . . 6 6 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r Click Firewall and click Web Content Filter to open the setup page. For this section, please refer to Web Content Filter user’s guide.[...]

Vigor2910 Series User’s Guide 62 3 3 . . 4 4 . . 6 6 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthen control i n network. When this functi on is enabled, all the assigne d IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC addres[...]

Vigor2910 Series User’s Guide 63 Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List . Edit It allows you to edit and modify the selected IP address and MAC address that you create before. Remove You can remove any item listed in IP Bind List . Simply click and se[...]

Vigor2910 Series User’s Guide 64 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address. If you choose LAN as the Interface here, and choose LAN as the di[...]

Vigor2910 Series User’s Guide 65 3 3 . . 5 5 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN [...]

Vigor2910 Series User’s Guide 66 3 3 . . 5 5 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Name Type a name for this profile. Protocol Sp[...]

Vigor2910 Series User’s Guide 67 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first and last values are different, it indicates that all the ports except the range defined here are available for this service type. (>) – the port number greater than this value is avail[...]

Vigor2910 Series User’s Guide 68 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All the available IP objects will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box. 3 3 . . 5 5 . . 5 5 C C S S M M P P r r o o f f i i [...]

Vigor2910 Series User’s Guide 69 Profile Name Type a name for the CSM profile. There are several items for IM, VoIP, P2P provided here for you to choose to disallow people using. Simple check the box (es) and then click OK . Later, in the Firewall>>Edit Filter Set>>Edit Filter Rule page, you can use Content Management drop down list t[...]

Vigor2910 Series User’s Guide 70 To activate the function of limit session, simply click Enable and set the default session limit. Enable Click this button to activate the function of limit session. Disable Click this button to close the function of limit session. Default session limit Defines the default session number used for each computer in [...]

Vigor2910 Series User’s Guide 71 In the Bandwidth Management menu, click Limit Bandwidth to open the web page. To activate the function of limit bandwidth, simply click Enable and set the default upstream and downstream limit. Enable Click this button to activate the function of limit bandwidth. Disable Click this button to close the function of [...]

Vigor2910 Series User’s Guide 72 set in that web page. 3 3 . . 6 6 . . 3 3 Q Q u u a a l l i i t t y y o o f f S S e e r r v v i i c c e e Deploying QoS (Quality of Servi ce) management to guarantee that all applications receive the service levels required and sufficient bandw idth to meet performance expectations is indeed one important aspect o[...]

Vigor2910 Series User’s Guide 73 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s effo[...]

Vigor2910 Series User’s Guide 74 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK , then click Setup[...]

Vigor2910 Series User’s Guide 75 On Line Statistics Display an online statistics for quality of service for your reference. E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click[...]

Vigor2910 Series User’s Guide 76 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Source Address Click the SrcEdit button to set the source address for the rule. Destination Address Click the DestEdit button to set the destination address for the rule. SrcEdit/DestEdit It allows you to edit[...]

Vigor2910 Series User’s Guide 77[...]

Vigor2910 Series User’s Guide 78 E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. For adding [...]

Vigor2910 Series User’s Guide 79 Port Configuration Click Single or Range . If you select Range, you have to type in the starting port number and the end porting num ber on the boxes below. Port Number – Type in the starting port num ber and the end porting number here if you choose Range as the type. By the way, you can set up to 40 service ty[...]

Vigor2910 Series User’s Guide 80 3 3 . . 7 7 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 7 7 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address assigned to y[...]

Vigor2910 Series User’s Guide 81 Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server. 3. Select Index number 1 to add an account for the router. Check Enable D[...]

Vigor2910 Series User’s Guide 82 In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. 3 3 . . 7 7 . . 2 2 S S c c h h e e d d u u l l e e The Vigor router has a built-in real time clock which can update itself manually or automatically by means of Network Time Protocols (NTP). As [...]

Vigor2910 Series User’s Guide 83 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply during[...]

Vigor2910 Series User’s Guide 84 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE In ternet access profile. Now , the PPPoE Internet connection will follow the schedule order to perform For ce On or Force Down action according to the time plan that has been pre-defined in the sched[...]

Vigor2910 Series User’s Guide 85 3 3 . . 7 7 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT routers[...]

Vigor2910 Series User’s Guide 86 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Softw are Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will blo ck the accessing ability of some network ports. Security Considerations Activating [...]

Vigor2910 Series User’s Guide 87 Wake by Two types provide for you to wake up the binded IP . If you choose Wake by MAC Address, you have to type the correct MAC address of the host in MAC Address boxes. If you choose Wake by IP Address, you have to choose the correct IP address. IP Address The IP addresses that have been configured in Firewall&g[...]

Vigor2910 Series User’s Guide 88 3 3 . . 8 8 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet. In short, by VPN technology, you can send data between two computers across a shared [...]

Vigor2910 Series User’s Guide 89 Authentication PAP Only users with the PAP protocol. PAP or CHAP Selecting this option means the router will attempt to authenticate dial-in users with th e CHAP protocol first. If the dial-in user does not support this protocol, it will fall back to use the PAP protocol for authentication. Dial-In PPP Encryption [...]

Vigor2910 Series User’s Guide 90 ¾ Phase 2: negotiation IPSec security methods including Authentication Header (AH) or Encapsulating Security Payload (ESP) for the following IKE exchange and mutual examination of the secure tunnel establishment. There are two encapsulation methods used in IPSec, Transport and Tunnel . The Transport mode will add[...]

Vigor2910 Series User’s Guide 91 Set to Factory Default Click it to clear all indexes. Index Click the num ber below Index to access into the setting page of IPSec Peer Identity. Name Display the profile name of that index. Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: [...]

Vigor2910 Series User’s Guide 92 Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can be IP Address, Domain, or E-mail Address . The box under the Type will appear according to the type you select and ask you to fill in corresponding setting. Accept Subject Na[...]

Vigor2910 Series User’s Guide 93 3 3 . . 8 8 . . 5 5 R R e e m m o o t t e e U U s s e e r r P P r r o o f f i i l l e e s s You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in or build the VPN connection. You may set parameters including specified connection peer ID, c onnecti[...]

Vigor2910 Series User’s Guide 94 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback function be[...]

Vigor2910 Series User’s Guide 95 select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. IKE Au[...]

Vigor2910 Series User’s Guide 96 3 3 . . 8 8 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including sp ecified connection direction (dial-in or dial-out), connection peer ID, connection type (VPN including PPTP, IPSec Tunnel, and L2TP by it[...]

Vigor2910 Series User’s Guide 97 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router wil[...]

Vigor2910 Series User’s Guide 98 Idle Timeout: The default value is 300 seconds. If the connection has been idled over the value, the router will drop the connection. Enable PING to keep alive This function is to help the router to determ ine the status of IPSec VPN connection, especially useful in the case of abnormal VPN IPSec tunnel disruption[...]

Vigor2910 Series User’s Guide 99 VJ compression This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. VJ Compression is used for TCP/IP protocol header compression. Normally set to Yes to improve bandwidth utilization. IKE Authentication Method This group of fields is applicable for IPSec Tunnels and L2TP[...]

Vigor2910 Series User’s Guide 100 IKE phase 1 proposal- To propose the local available authentication schemes and encryption algorithms to the VPN peers, and get its feedback to find a match. Two combinations are available for Aggressive mode and nine for Main mode. We suggest you select the combination that covers the most schemes. IKE phase 2 p[...]

Vigor2910 Series User’s Guide 101 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for i model only. In addition, you can further set up Callback function below. PPTP Allow the[...]

Vigor2910 Series User’s Guide 102 Also, you should further specify the corresponding security methods on the right side. If you uncheck the checkbox , the connection type you select above will apply the authentication methods and security methods in the general settings. User Name This field is applicable when you select ISDN, PPTP or L2TP with o[...]

Vigor2910 Series User’s Guide 103 address from the remote router during the IPCP negotiation phase. If the PPP IP address is fixed by remote side, specify the fixed IP address here. Do not change the default value if you do not select ISDN, PPTP or L2TP. Remote Gateway IP This field is only applicable when you select ISDN, PPTP or L2TP with or wi[...]

Vigor2910 Series User’s Guide 104 3 3 . . 8 8 . . 7 7 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You m ay also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Dial Click [...]

Vigor2910 Series User’s Guide 105 3 3 . . 9 9 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc., and the digital signature of the ce[...]

Vigor2910 Series User’s Guide 106 Type in all the information that the window request. Then click Generate again. Import Click this button to im port a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After [...]

Vigor2910 Series User’s Guide 107 3 3 . . 9 9 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. Then[...]

Vigor2910 Series User’s Guide 108 3 3 . . 9 9 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them . If you want to set encryption password for these certificates, please type c[...]

Vigor2910 Series User’s Guide 109 3 3 . . 1 1 0 0 V V o o I I P P Voice over IP network (VoIP) enables you to use your broadband Internet connection to make toll quality voice calls over the Internet. There are many different call signaling protocols, methods by which VoIP devices can talk to each other. The most popular protocols are SIP, MGCP, [...]

Vigor2910 Series User’s Guide 110 only have to using dial plan or directly dial your friend’s account name if you are with the same SIP Registrar. Please refer to the Example 1 and 2 in the Calling Scenario. z Peer-to-Peer Before calling, you have to know your friend’s IP Address. The Vigor VoIP Routers will build connection between each othe[...]

Vigor2910 Series User’s Guide 111 Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your frien[...]

Vigor2910 Series User’s Guide 112 Enable Check this box to invoke this setting. Prefix Number The phone number set here is used to add, strip, or replace the OP number. Mode None - No action. Add - When you choose this mode, the OP number will be added with the prefix number for calling out through the specific VoIP interface. Strip - When you ch[...]

Vigor2910 Series User’s Guide 113 Min Len Set the minimal length of the dial number for appl ying the prefix number settings. Take the above picture (Prefix Table Setup web page) as an example, if the dial number between 7 and 9, that number can apply the prefix num ber settings here. Max Len Set the maximum length of the dail number for applying[...]

Vigor2910 Series User’s Guide 114 SIP PING interval The default value is 150sec. It is useful for a Nortel server NAT Traversal Support. Status Show the status for the corresponding SIP account. R means such account is registered on SIP server successfully. – means the account is failed to register on SIP server. Profile Name Assign a name for [...]

Vigor2910 Series User’s Guide 115 Display Name The caller-ID that you want to be displayed on your f riend’s screen. Account Number/Name Enter your account name of SIP Address, e.g. every text before @. Authentication ID Check the box to invoke this function and enter the name or number used for SIP Authorization with SIP Registrar. If this set[...]

Vigor2910 Series User’s Guide 116 3 3 . . 1 1 0 0 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone settings for VoIP 1 and VoIP 2 respectively. Phone List Port – There are three phone ports provided here for you to configure. Call feature – A brief description for call feature will be shown in thi[...]

Vigor2910 Series User’s Guide 117 RTP Symmetric RTP – Check this box to invoke the function. To make the data transmission going through on both ends of local router and remote router not misleading due to IP lost (for example, sending data from the public IP of rem ote router to the private IP of local router), you can check this box to solve [...]

Vigor2910 Series User’s Guide 118 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically. T.38 Fax Fun[...]

Vigor2910 Series User’s Guide 119 Single Codec – If the box is checked, only the selected Codec will be applied. Packet Size -The amount of data contained in a single packet. The default value is 20 ms, which means the data packet will contain 20 ms voice information. Voice Active Detector - This function can detect if the voice on both sides i[...]

Vigor2910 Series User’s Guide 120 Region Select the proper region which you are located. The common settings of Caller ID Type , Dial tone , Ringing tone , Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ri[...]

Vigor2910 Series User’s Guide 121 phone set supports, please use the default setting. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC Dial Tone Power Leve l - This setting is used to adjust the loudness of the dial[...]

Vigor2910 Series User’s Guide 122 3 3 . . 1 1 0 0 . . 4 4 S S t t a a t t u u s s On VoIP call status, you can find codec, connection and other important call status for VoIP 1/2 ports. Refresh Seconds Specify the interval of refresh time to obtain the latest VoIP calling information. The information will update immediately when the Refresh butto[...]

Vigor2910 Series User’s Guide 123 Tx Pkts Total number of transmitted voice packets during this connection session. Rx Pkts Total number of received voice packets during this connection session. Rx Losts Total number of lost packets during this connection session. Rx Jitter The jitter of received voice packets. In Calls The accumulating in-call t[...]

Vigor2910 Series User’s Guide 124 3 3 . . 1 1 1 1 W W i i r r e e l l e e s s s s L L A A N N This function is used for G models only. 3 3 . . 1 1 1 1 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed tremendous growth. Wireless technology now reaches or is capable o[...]

Vigor2910 Series User’s Guide 125 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit ke y. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys. WPA(Wi-Fi Protected Access), the most domina ting [...]

Vigor2910 Series User’s Guide 126 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each othe r. To elaborate an example for business use, you may set up a wireless LAN for visit[...]

Vigor2910 Series User’s Guide 127 3 3 . . 1 1 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Check the box to enable wi[...]

Vigor2910 Series User’s Guide 128 selected channel is under serious interference. Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN. Depending on the wireless utility, the user may only see the information except SSID or just cannot see any thing about Vigor wireless[...]

Vigor2910 Series User’s Guide 129 3 3 . . 1 1 1 1 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP Only - Accepts only WEP clients [...]

Vigor2910 Series User’s Guide 130 either Mixed or WPA2 only in the field below. Since the key will be auto-negotiated during authentication, the field of key setting below will be not available for input. WPA The WPA encrypts each frame transmitted from the radio using the key, which either PSK entered manually in this field below or automaticall[...]

Vigor2910 Series User’s Guide 131 3 3 . . 1 1 1 1 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wire less LAN MAC address of client. Only the valid MAC address that has been configured can access[...]

Vigor2910 Series User’s Guide 132 OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 3 3 . . 1 1 1 1 . . 5 5 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge [...]

Vigor2910 Series User’s Guide 133 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Mode Choos[...]

Vigor2910 Series User’s Guide 134 Security There are three types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page. If you did not set any key in [...]

Vigor2910 Series User’s Guide 135 If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page and click Add . Later, the MAC address of the AP will be added to the page of WDS setting. 3 3 . . 1 1 1 1 . . 7 7 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of [...]

Vigor2910 Series User’s Guide 136 3 3 . . 1 1 1 1 . . 8 8 S S t t a a t t i i o o n n R R a a t t e e C C o o n n t t r r o o l l This page allows you to cont rol the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting. The range for the rate is between 100 ~ 30,000 kbps. 3 3 . . 1 1 2[...]

Vigor2910 Series User’s Guide 137 Enable Check this box to enable this function (for VLAN Configuration). P1 – P4 Check the box to make the com puter connecting to the port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box. For exam ple, if you check the boxes of[...]

Vigor2910 Series User’s Guide 138 The VLAN >> Wireless VALN allows you to configure Wireless VLAN settings through wireless connection to achieve the above intention. Sim ply type Login ID and password with City and 1234 in the boxes of W_VLAN0. And t ype Login ID and password with Home and 7890 in the boxes of W_VLAN1. Users can conf igure[...]

Vigor2910 Series User’s Guide 139 Details Click this button to set additional attributes settings for W_VLAN. Activated Date – Use the drop down lists to set the activated date for the wireless VLAN. The wireless VLAN function will be available when the time is arrival. Expired Date – Use the drop down lists to set the expired date for the wi[...]

Vigor2910 Series User’s Guide 140 4. When the accessing is successful, the following screen will appear. Note: The floating window with connection tim e will be shown on the screen till you logout. 5. You can go to Diagnostics>>Wireless VLAN Online Station for viewing the connection status whenever you want.[...]

Vigor2910 Series User’s Guide 141 3 3 . . 1 1 2 2 . . 3 3 V V L L A A N N C C r r o o s s s s S S e e t t u u p p This function allows the router to integr ate VLAN and W_VLAN for managing different computers (notebooks). See the following picture for an exam ple. With VLAN Cross Setup , notebook A/B and PCs on VLAN0 can share resources without d[...]

Vigor2910 Series User’s Guide 142 VLAN0-3 It represents the groups of virtual LAN connected by Ethernet interface. W_VLAN0-15 It represents the groups of wireless VLAN communicated by wireless interface. 3 3 . . 1 1 2 2 . . 4 4 W W i i r r e e l l e e s s s s R R a a t t e e C C o o n n t t r r o o l l Rate Control manages the transmission rate o[...]

Vigor2910 Series User’s Guide 143 3 3 . . 1 1 3 3 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items fo[...]

Vigor2910 Series User’s Guide 144 Default Gateway Display the assigned IP address of the default gateway. DNS Display the assigned IP address of the primary DNS. MAC Address Display the MAC address of the wireless LAN. Frequency Domain It can be Europe (13 usable channels), USA (11 usable channels) etc. The available channels supported by the wir[...]

Vigor2910 Series User’s Guide 145 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself. 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for dem onstrating examples. The Mac or Linux plat[...]

Vigor2910 Series User’s Guide 146 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click Browse button to choose the correct confi guration file for uploading to the router. 3. Click Restore button[...]

Vigor2910 Series User’s Guide 147 Password Type the password for authentication. Click OK to save these settings. For viewing the Syslog, please do the following: 1. Just set your monitor PC’s IP address in the field of Server IP Address 2. Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools[...]

Vigor2910 Series User’s Guide 148 3 3 . . 1 1 3 3 . . 5 5 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as ro[...]

Vigor2910 Series User’s Guide 149 3 3 . . 1 1 3 3 . . 6 6 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session. The default value is 50[...]

Vigor2910 Series User’s Guide 150 Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a pr oper name. The default setting is public. Notification Host[...]

Vigor2910 Series User’s Guide 151 3 3 . . 1 1 3 3 . . 8 8 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this ex[...]

Vigor2910 Series User’s Guide 152 3 3 . . 1 1 4 4 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 4 4 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial-ou[...]

Vigor2910 Series User’s Guide 153 Refresh Click it to reload the page. 3 3 . . 1 1 4 4 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content of the ARP (Address Resolution Protocol) cache held in the rout er. The table shows a mapping between an Ethernet hardware address (MAC A[...]

Vigor2910 Series User’s Guide 154 Index It displays the connection item number. IP Address It displays the IP address assigned by this router for specified PC. MAC Address It displays the MAC address for the specified PC that DHCP assigned IP address for it. Leased Time It displays the leased time of the specified PC. HOST ID It displays the host[...]

Vigor2910 Series User’s Guide 155 3: WAN 4 or above: VPN Status The status values are defined as follows: 0: other TCP status 1: TCP fin incoming 2: TCP fin out 3: TCP fin closing 4: TCP syn 5: TCP syn,ack 6: TCP ack Refresh Click it to reload the page. 3 3 . . 1 1 4 4 . . 6 6 W W i i r r e e l l e e s s s s V V L L A A N N O O n n l l i i n n e [...]

Vigor2910 Series User’s Guide 156 3 3 . . 1 1 4 4 . . 7 7 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determ ined by the router automatically. Ping to Use[...]

Vigor2910 Series User’s Guide 157 Enable Data Flow Monitor Check this box to enable this function. Order by Use the drop down list to choose the order of data arranging. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh th i[...]

Vigor2910 Series User’s Guide 158 Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column. 3 3 . . 1 1 4 4 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to [...]

Vigor2910 Series User’s Guide 159 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d [...]

Vigor2910 Series User’s Guide 160 set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5.[...]

Vigor2910 Series User’s Guide 161 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s sele cted, [...]

Vigor2910 Series User’s Guide 162 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: 1. Go to VPN and Remote Access and select Remote Access Cont rol to enable the necessary VPN[...]

Vigor2910 Series User’s Guide 163 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dia[...]

Vigor2910 Series User’s Guide 164 Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service is selected, y ou may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security Method for this Dial-In connection. Otherwise, it will apply t[...]

Vigor2910 Series User’s Guide 165 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets des tined to the remote network to Router A via the VPN connection.[...]

Vigor2910 Series User’s Guide 166 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

Vigor2910 Series User’s Guide 167 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security[...]

Vigor2910 Series User’s Guide 168 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. Y[...]

Vigor2910 Series User’s Guide 169 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router. If a PPP-based service is selected, you should fu rther specify the remote VPN server IP address, Username, Password, and[...]

Vigor2910 Series User’s Guide 170 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he woul[...]

Vigor2910 Series User’s Guide 171 3. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserve bandwidth for HTTPS. And click Basic button on the right. 4. Click Setup link for W AN1. Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic of V oIP influent other application. 5. If th[...]

Vigor2910 Series User’s Guide 172 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.1 68.1.1/255.255.255.0. The built-in DHCP server is enabled so it [...]

Vigor2910 Series User’s Guide 173 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

Vigor2910 Series User’s Guide 174 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers. John?[...]

Vigor2910 Series User’s Guide 175 Number for John) Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: [...]

Vigor2910 Series User’s Guide 176 Account Name) 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used fo[...]

Vigor2910 Series User’s Guide 177 Phone Number for John)[...]

Vigor2910 Series User’s Guide 178 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. 1. Insert CD of the router to your CD ROM. 2. From the we[...]

Vigor2910 Series User’s Guide 179 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 12. Type in your router IP, usua[...]

Vigor2910 Series User’s Guide 180 14. Click Send . 15. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r[...]

Vigor2910 Series User’s Guide 181 1. Go to Certificate Management and choose Local Certificate . 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.[...]

Vigor2910 Series User’s Guide 182 4. Connect to CA server via web browser. Follo w the instruction to subm it the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate . Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS [...]

Vigor2910 Series User’s Guide 183 Then you have done the request and the ser ver now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate . Now you should get a certificate (.cer file) and save it. 5. Back to Vigor router, go to Local Certificate . Click IMPORT button and browse the file to import the certifica[...]

Vigor2910 Series User’s Guide 184 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA cert[...]

Vigor2910 Series User’s Guide 185 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refres[...]

Vigor2910 Series User’s Guide 186 This page is left blank.[...]

Vigor2910 Series User’s Guide 187 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Che[...]

Vigor2910 Series User’s Guide 188 F F o o r r W W i i n n d d o o w w s s  The example is based on Windows XP. As to the examples for other operation systems, please refer to the si milar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s. 2. Right-click on Local Area Connectio[...]

Vigor2910 Series User’s Guide 189 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configure[...]

Vigor2910 Series User’s Guide 190 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router. The most impor[...]

Vigor2910 Series User’s Guide 191[...]

Vigor2910 Series User’s Guide 192 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly. F F o o r r P P P P P P o o E E U U s s e e r r s s 1. Check if the Enabl[...]

Vigor2910 Series User’s Guide 193 5 5 . . 5 5 B B a a c c k k i i n n g g t t o o F F a a c c t t o o r r y y D D e e f f a a u u l l t t S S e e t t t t i i n n g g I I f f N N e e c c e e s s s s a a r r y y Sometimes, a wrong connection can be im proved by returning to the default settings. Try to reset the router by software or hardware. Warn[...]

Vigor2910 Series User’s Guide 194 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly , please re lease the button. Then, the router will restar t with the default configuration. After restore th[...]

Vigor2910 Series User’s Guide 195[...]