Draytek 2800 Series manual

Vigor2800 Series ADSL2/2+ Security Router User’s Guide Version: 3.1 Date: 2006/6/20 Copyright 2006 All rights reserve d. This publication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval syst em, or translated into any lang u age without written permission from the co[...]

Vigor2800 Series User’s Guide ii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 LED Indicators and Connectors .............................................................................................. 1[...]

Vigor2800 Series User’s Guide iii 3.4.4 IM Blocking .............................................................................................................. ....... 50 3.4.5 P2P Blocking ............................................................................................................. ..... 50 3.4.6 DoS Defense ..................[...]

Vigor2800 Series User’s Guide iv 3.12.5 Wireless Ra te Control ................................................................................................. 14 0 3.13 System Ma intenance........................................................................................................ . 141 3.13.1 System Status ..........................[...]

Vigor2800 Series User’s Guide 1 1 P P r r e e f f a a c c e e Targeting requirement for residential, SOHO (Small Office and Home Office) and business users, the Vigor2800 series is an ADSL2/2 + enabled integrated access device. With downstream speed up to 12Mbps (ADSL2) or 24Mbps (ADSL2+), the Vigor2800 V models provide exceptional bandwidth for [...]

Vigor2800 Series User’s Guide 2 1 1 . . 1 1 . . 1 1 F F o o r r V V i i g g o o r r 2 2 8 8 0 0 0 0 ACT QoS P2P Firewall VPN Printer DSL P1 P2 P3 P4 LAN Factory Reset DSL P1 P2 P3 P4 PWR Printer L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powered on and running properly. ACT (Activity) On [...]

Vigor2800 Series User’s Guide 3 1 1 . . 1 1 . . 2 2 F F o o r r V V i i g g o o r r 2 2 8 8 0 0 0 0 G G ACT QoS P2P Firewall WLAN Printer D S L P 1P 2 P 3P 4 LAN Factory Reset DSL P1 P2 P3 P4 PWR Printer L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (A[...]

Vigor2800 Series User’s Guide 4 1 1 . . 1 1 . . 3 3 F F o o r r V V i i g g o o r r 2 2 8 8 0 0 0 0 i i A CT ISDN P2P Firewall VPN Printer DSL P1 P2 P3 P4 LAN Factory Reset DSL P1 P2 P3 P4 PWR Printer ISDN L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powered on and running properly. ACT (Ac[...]

Vigor2800 Series User’s Guide 5 1 1 . . 1 1 . . 4 4 F F o o r r V V i i g g o o r r 2 2 8 8 0 0 0 0 G G i i A CT P2P Firewall WLAN Printer DSL P1 P2 P3 P 4 LAN ISDN Factory Reset DSL P1 P2 P3 P4 PWR Printer ISDN L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly[...]

Vigor2800 Series User’s Guide 6 1 1 . . 1 1 . . 5 5 F F o o r r V V i i g g o o r r 2 2 8 8 0 0 0 0 V V L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powered on and running properly. ACT (Activity) On The router is powered on. On The QoS function is active. QoS Off The QoS function is inacti[...]

Vigor2800 Series User’s Guide 7 1 1 . . 1 1 . . 6 6 F F o o r r V V i i g g o o r r 2 2 8 8 0 0 0 0 V V G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powered on and running properly. ACT (Activity) On The router is powered on. On The QoS function is active. QoS Off The QoS function is in[...]

Vigor2800 Series User’s Guide 8 1 1 . . 1 1 . . 7 7 F F o o r r V V i i g g o o r r 2 2 8 8 0 0 0 0 V V G G i i A CT ISDN FXS1 FXS2 WLAN Printe r DSL P1 P2 P3 P4 LAN Phone Factory Reset DSL P1 P2 P3 P4 PWR Printer ISDN F X S2 F XS 1 L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on a[...]

Vigor2800 Series User’s Guide 9 1 1 . . 2 2 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the DSL interface to the extern al ADSL splitter with an ADSL line cable. 2. Connect one port of 4-port switch to your computer [...]

Vigor2800 Series User’s Guide 10 This page is left blank.[...]

Vigor2800 Series User’s Guide 11 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator and [...]

Vigor2800 Series User’s Guide 12 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type a new one in the field of New Password and retype it on the field of Retype New Password . Then click OK to continue. 6. Now, the password has been changed. N[...]

Vigor2800 Series User’s Guide 13 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After ty ping the passwor[...]

Vigor2800 Series User’s Guide 14 VCI Stands for Virtual Channel Identifier. It is a 16-bit field inside ATM cell’s header that indicates the cell’s next destination as it travels through the network. A virtual channel is a logical connection between two end devices on the network. Protocol/Encapsulation Select an IP mode for this WAN interfac[...]

Vigor2800 Series User’s Guide 15 User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Always On Check this box to allow the router connecting to In ternet forever. Idle Timeout Type in the value (unit is second) as the idle timeout of the conne[...]

Vigor2800 Series User’s Guide 16 2 2 . . 2 2 . . 3 3 B B r r i i d d g g e e d d I I P P Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. The online status of this protocol will be shown as bel[...]

Vigor2800 Series User’s Guide 17 2 2 . . 2 2 . . 4 4 R R o o u u t t e e d d I I P P Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page.[...]

Vigor2800 Series User’s Guide 18 Click Finish. The online status of this protocol will be shown as below. 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE or PPPoA as the protocol, you wi[...]

Vigor2800 Series User’s Guide 19 Online status for Routed IP Primary DNS Displays the assigned IP address of the primary DNS. Secondary DNS Displays the assigned IP address of the secondary DNS. IP Address (in LAN) Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface. RX Packets Disp[...]

Vigor2800 Series User’s Guide 20 2 2 . . 4 4 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your setti[...]

Vigor2800 Series User’s Guide 21 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed infor[...]

Vigor2800 Series User’s Guide 22 Below shows the menu items for Internet Access. 3 3 . . 1 1 . . 2 2 P P P P P P o o E E / / P P P P P P o o A A PPPoA, included in RFC1483, can be operated in either Logical Link Control-Subnetwork (LLC) Access Protocol or VC-Mux mode. As a CPE device, Vigor router encapsulates the PPP session based for transport [...]

Vigor2800 Series User’s Guide 23 Protocol - Drop down the list to choo se the one provided by ISP. If you have already used Quick Start Wizard to set the protocol, then it is not necessary for you to ch ange any settings in this group. PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connect[...]

Vigor2800 Series User’s Guide 24 By checking the checkbox Join NAT IP Pool , data from NAT hosts will be round-robin forwarded on a session basis. If you do not check Join NAT IP Pool , you can still use these public IP addresses for other purpose, such as DMZ host, Open[...]

Vigor2800 Series User’s Guide 25 Ports. Default MAC Address Type in MAC address for the router. You can use Default MAC Address or specify another MAC address for your necessity. MAC Address – Type in the MAC address for the router manually. Index (1-15) in Schedule Setup You can type in four sets of time schedule for your request. All the sche[...]

Vigor2800 Series User’s Guide 26 3 3 . . 1 1 . . 3 3 M M P P o o A A ( ( R R F F C C 1 1 4 4 8 8 3 3 / / 2 2 6 6 8 8 4 4 ) ) MPoA is a specification that enables ATM ser vices to be integrated with existing LANs, which use either Ethernet, token-ring or TCP/ IP protocols. The goal of MPoA is to allow different LANs to send packets to each other v[...]

Vigor2800 Series User’s Guide 27 Domain Name – Type in the domain name that you have assigned. WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on th e WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Specify an IP address – Click th[...]

Vigor2800 Series User’s Guide 28 3 3 . . 1 1 . . 4 4 M M u u l l t t i i - - P P V V C C s s This router allows you to create multi-PVCs for different data transferring for using. Simply go to Internet Access and select Multi-PVC Setup page. Enable Type in the primary IP address for the router. If necessary, type VPI Type in the value provided by[...]

Vigor2800 Series User’s Guide 29 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router is[...]

Vigor2800 Series User’s Guide 30 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the r[...]

Vigor2800 Series User’s Guide 31 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T y pe in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask T[...]

Vigor2800 Series User’s Guide 32 DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.2 or greater , but smaller than 220.135.240. 254. IP Pool Counts: Enter the number of IP addresses in the pool. The maximum is 10. For example, if you t ype 3 and[...]

Vigor2800 Series User’s Guide 33 the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Internet host must have a unique IP address, also they may have a human-friendly, easy to remember name such as www.y ahoo.com. The DNS[...]

Vigor2800 Series User’s Guide 34 Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i c c R R o o u u t t e e s s t t o o P P r r i i v v a a t t e e a a n n d d P P u u b b l l i i c c N N e e t t w w o o r r k k s s Here is an example of setting Static Route in Main Router so that user A and B loc[...]

Vigor2800 Series User’s Guide 35 2. Click the LAN - S tatic Route and click on the Index Number 1. Please add a static route as shown below , which regulates all p ackets destined to 192.168.10.0 will be forwarded to 192.168.1.2. Click OK . 3. Return to St a t i c R o u t e Setup page. Click on another Index Number to add another static route as [...]

Vigor2800 Series User’s Guide 36 D D i i s s a a b b l l e e S S t t a a t t i i c c R R o o u u t t e e 1. Click the Index Number that you want to disable from the St a t i c R o u t e Configuration page. 2. Select Inactive/Disable from the drop-down menu, and then click the OK button to disable the route. 3 3 . . 3 3 N N A A T T Usually, the ro[...]

Vigor2800 Series User’s Guide 37 3 3 . . 3 3 . . 1 1 P P o o r r t t R R e e d d i i r r e e c c t t i i o o n n Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc. Most of the case, you need a public IP address for each server and this public IP addre[...]

Vigor2800 Series User’s Guide 38 Protocol Select the transport layer protocol (TCP or UDP). Public Port Specify which port can be redirected to the specified Private IP and Port of the internal host. Private IP Specify the private IP address of the internal host providing the service. Private Port Specify the private port number of the service of[...]

Vigor2800 Series User’s Guide 39 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias in Internet Access>>PPPoE/PPPoA or Internet Access>>MPoA, y o[...]

Vigor2800 Series User’s Guide 40 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open[...]

Vigor2800 Series User’s Guide 41 Status Display the state for the corresponding entry. X or V is to represent the Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Enable Open Ports Check to e[...]

Vigor2800 Series User’s Guide 42 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor[...]

Vigor2800 Series User’s Guide 43 I I P P F F i i l l t t e e r r s s Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter . z Call Filter - When there is no existing Internet connection, Call Fi[...]

Vigor2800 Series User’s Guide 44 I I n n s s t t a a n n t t M M e e s s s s e e n n g g e e r r ( ( I I M M ) ) a a n n d d P P e e e e r r - - t t o o - - P P e e e e r r ( ( P P 2 2 P P ) ) A A p p p p l l i i c c a a t t i i o o n n B B l l o o c c k k i i n n g g As the popularity of all kinds of instant messenger application arises, communi[...]

Vigor2800 Series User’s Guide 45 W W e e b b F F i i l l t t e e r r i i n n g g We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible pare nt or employer, you should protect those in your trust against the hazards. With Web filtering service of the Vigor router, you can prote[...]

Vigor2800 Series User’s Guide 46 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Log Flag For troubleshooting needs you can specify the filter log here. None - The log function[...]

Vigor2800 Series User’s Guide 47 To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule num ber button to edit each rule. Check Active to enable the rule. Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the[...]

Vigor2800 Series User’s Guide 48 immediately. Pass Immediately - Packets matching the rule will be passed immediately. Block If No Further Match - A packet matching the rule, and that does not match further rules, will be dropped. Pass If No Further Match - A packet matching the rule, and that does not match further rules, will be passed through.[...]

Vigor2800 Series User’s Guide 49 Fragmented - Apply the rule to fragmented packets. Too Short - Apply the rule only to packets that are too short to contain a complete header. E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 ca[...]

Vigor2800 Series User’s Guide 50 3 3 . . 4 4 . . 4 4 I I M M B B l l o o c c k k i i n n g g IM Blocking means instant messenger blocking. Click Firewall and click IM Blocking to open the setup page. You will see a list of common IM (such as MSN, Yahoo, ICQ/AQL) applications. Check Enable IM Blocking and select the one(s) that you want to block. [...]

Vigor2800 Series User’s Guide 51 3 3 . . 4 4 . . 6 6 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defense [...]

Vigor2800 Series User’s Guide 52 detecting this malicious exploration behavior by monitoring the port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router will ignore a[...]

Vigor2800 Series User’s Guide 53 IP spoofing. A Land attack occurs when an attacker sends spoofed SYN packets with the identical s ource and destination addresses, as well as the port number to victims. Block Unknown Protocol Check the box to activate the Block Unknown Protocol function. Individual IP packet has a protocol field in the datagram h[...]

Vigor2800 Series User’s Guide 54 Enable URL Access Control Check the box to activate URL Access Control. Black List (block those matching keyword) Click this button to restrict accessing into the corresponding webpage with the keywords listed on the box below. White List (pass those matching keyword) Click this button to allow accessing into the [...]

Vigor2800 Series User’s Guide 55 Enable Restrict Web Feature Check the box to activate the function. Java - Check the checkbox to activate the Block Java object function. The Vigor router will discard the Java objects from the Internet. ActiveX - Check the box to activate the Block ActiveX object function. Any ActiveX object from the Internet wil[...]

Vigor2800 Series User’s Guide 56 3 3 . . 4 4 . . 8 8 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r Click Firewall and click Web Content Filter to open the setup page. For this section, please refer to Web Content Filter user’s guide.[...]

Vigor2800 Series User’s Guide 57 3 3 . . 4 4 . . 9 9 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthen control i n network. When this functi on is enabled, all the assigne d IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC addres[...]

Vigor2800 Series User’s Guide 58 Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List . Edit It allows you to edit and modify the selected IP address and MAC address that you create before. Remove You can remove any item listed in IP Bind List . Simply click and se[...]

Vigor2800 Series User’s Guide 59 To activate the function of limit session, simply click Enable and set the default session limit. Enable Click this button to activate the function of limit session. Disable Click this button to close the function of limit session. Default session limit Define the default session number used for each computer in L[...]

Vigor2800 Series User’s Guide 60 3 3 . . 5 5 . . 2 2 L L i i m m i i t t B B a a n n d d w w i i d d t t h h The downstream or upstream from FTP, HTTP or some P2P applications will occupy large of bandwidth and affect other normal applica tions. Please can use Limit Bandwidth to make the bandwidth usage more efficient. In the Bandwidth Management[...]

Vigor2800 Series User’s Guide 61 Add Add the specific speed limitation onto the list above. Edit Allows you to edit the settings for the selected limitation. Remove Remove the selected settings existing on the limitation list. Index (1-15) in Schedule Setup You can type in four sets of time schedule for your request. All the schedules can be set [...]

Vigor2800 Series User’s Guide 62 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s effo[...]

Vigor2800 Series User’s Guide 63 Enable UDP Bandwidth Control Check this and set the limited bandwidth ratio on the right field. This is a protection of TCP application traffic since UDP application traffic such as streaming video will exhaust lots of bandwidth. Limited_bandwidth Ratio The ratio typed here is reserved for limited bandwidth of UDP[...]

Vigor2800 Series User’s Guide 64 For inserting a rule, click Insert to open the following page. SrcEdit It allows you to edit source address information. Address Type – Determine the address type for the source address. For Single Address , you have to fill in Start IP address. For Range Address , you have to fill in Start IP address and End IP[...]

Vigor2800 Series User’s Guide 65 DestEdit It allows you to edit destination address information. Address Type – Determine the address type for the destination address. For Single Address , you have to fill in Start IP address. For Range Address , you have to fill in Start IP address and End IP address. For Subnet Address , you have to fill in S[...]

Vigor2800 Series User’s Guide 66 Service Type It determines the service type of the data for processing with QoS control. It can also be edited. You can choose the predefined service type from the Service Type drop down list. Those types are predefined in factory. Simply choose the one that you want for using by current QoS. In addition, you can [...]

Vigor2800 Series User’s Guide 67 3 3 . . 6 6 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 6 6 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address assigned to y[...]

Vigor2800 Series User’s Guide 68 Active Display if this account is active or inactive. 3. Select Index number 1 to add an account for the router. Check Enable Dynamic DNS Account, and choose correct Service Provi der: dyndns.org, t ype the registered hostname: hostname and domain name suffix: dyndns.org in the Do main Name block. The following tw[...]

Vigor2800 Series User’s Guide 69 3 3 . . 6 6 . . 2 2 S S c c h h e e d d u u l l e e The Vigor router has a built-in real time clock which can update itself manually or automatically by means of Network Time Protocols (NTP). As a re sult, y ou can not only schedule the router to dialup to the Internet at a specified time, but also restrict Intern[...]

Vigor2800 Series User’s Guide 70 Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply during the period of the schedule. Force On - Force the co[...]

Vigor2800 Series User’s Guide 71 Enable Check to enable RADIUS client feature Server IP Address Enter the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using. The default value is 1812 , based on RFC 2138. Shared Secret The RADIUS server and client share a secret that is used to authenticate the messag[...]

Vigor2800 Series User’s Guide 72 3 3 . . 6 6 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT routers[...]

Vigor2800 Series User’s Guide 73 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Softw are Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will blo ck the accessing ability of some network ports. Security Considerations Activating [...]

Vigor2800 Series User’s Guide 74 3 3 . . 6 6 . . 5 5 W W a a k k e e O O n n L L A A N N A PC client on LAN can wake up specified PC through the router. Yet the specified PC must have installed a network card supporting WOL function. B y the way, WOL function must be set as “Enable” on the BIOS setting of the specified PC. Wake by Two types p[...]

Vigor2800 Series User’s Guide 75 3 3 . . 7 7 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet. In short, by VPN technology, you can send data between two computers across a shared [...]

Vigor2800 Series User’s Guide 76 Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP or CHAP Selecting this option means the router will attempt to authenticate dial-in users with th e CHAP protocol first. If the dial-in user does not support this protocol, it will fa[...]

Vigor2800 Series User’s Guide 77 two IP addresses of 192.168.1. 200 and 192.168.1.201 are reserved for ISDN remote dial-in user. 3 3 . . 7 7 . . 3 3 I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration. There are two phases of IPSec. ¾ Phase 1: negotiation of IKE p[...]

Vigor2800 Series User’s Guide 78 IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypte d. By default, this option is active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standa[...]

Vigor2800 Series User’s Guide 79 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can be IP Address, Domain, or E-mail Address . The box under the[...]

Vigor2800 Series User’s Guide 80 3 3 . . 7 7 . . 5 5 R R e e m m o o t t e e U U s s e e r r P P r r o o f f i i l l e e s s You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in or build the VPN connection. You may set parameters including specified connection peer ID, c onnecti[...]

Vigor2800 Series User’s Guide 81 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback function be[...]

Vigor2800 Series User’s Guide 82 Uncheck the checkbox- This means the connection type you select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable when you select ISDN[...]

Vigor2800 Series User’s Guide 83 3 3 . . 7 7 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including sp ecified connection direction (dial-in or dial-out), connection peer ID, connection type (VPN including PPTP, IPSec Tunnel, and L2TP by it[...]

Vigor2800 Series User’s Guide 84 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. Call Direction Specify the allowed call direction of this LAN-to-LAN profile. Both :-initiator/responder Dial-Out - initiator only Dial-In- responder only. Always On or Idle Timeout Al[...]

Vigor2800 Series User’s Guide 85 Normally, if any one of VPN peers wants to disconnect the connection, it should follow a serial of packet exchange procedure to inform each other. However, if the remote peer disconnect without notice, Vigor router will by no where to know this situation. To resolve this dilemma, by continuously sending PING packe[...]

Vigor2800 Series User’s Guide 86 High (ESP-Encapsulating Security Payload)- means payload (data) will be encrypted and authenticated. Select from below: DES without Authentication -Use DES encryption algorithm and not apply any authentication scheme. DES with Authentication- Use DES encryption algorithm and apply MD5 or SHA-1 authentication algor[...]

Vigor2800 Series User’s Guide 87 Perfect Forward Secret (PFS)- The IKE Phase 1 key will be reused to avoid the computation complexity in phase 2. The default value is inactive this function. Local ID - In Aggressive mode, Local ID is on behalf of the IP address while identity authenticating with remote VPN server. The length of the ID is limited [...]

Vigor2800 Series User’s Guide 88 PPTP Allow the remote dial-in user to make a PPTP VPN connection through the Internet. You should set the U ser Name and Password of remote dial-in user below. IPSec Tunnel Allow the remote dial-in user to trigger a IPSec VPN connection through Internet. L2TP Allow the remote dial-in user to make a L2TP VPN connec[...]

Vigor2800 Series User’s Guide 89 encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. Callback Function The callback function provides a callback service only for the ISDNLAN-to-LAN connection (this feature is useful for i model only). The remote user will be charged the connection fee by the telecom. Check to ena[...]

Vigor2800 Series User’s Guide 90 3 3 . . 7 7 . . 7 7 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You m ay also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Dial Click t[...]

Vigor2800 Series User’s Guide 91 3 3 . . 8 8 . . 1 1 L L o o c c a a l l C C e e r r t t i i f f i i c c a a t t e e Generate Click this button to open G enerate Certificate Request window. Type in all the information that the window request. Then click Generate again. Import Click this button to im port a saved file as the certification informat[...]

Vigor2800 Series User’s Guide 92 3 3 . . 8 8 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. Then [...]

Vigor2800 Series User’s Guide 93 For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA cer tificate, choose the one and click Delete to remove all the certificate information.[...]

Vigor2800 Series User’s Guide 94 3 3 . . 9 9 V V o o I I P P Voice over IP network (VoIP) enables you to use your broadband Internet connection to make toll quality voice calls over the Internet. There are many different call signaling protocols, methods by which VoIP devices can talk to each other. The most popular protocols are SIP, MGCP, Megac[...]

Vigor2800 Series User’s Guide 95 only have to using dial plan or directly dial your friend’s account name if you are with the same SIP Registrar. Please refer to the Example 1 and 2 in the Calling Scenario. z Peer-to-Peer Before calling, you have to know your friend’s IP Address. The Vigor VoIP Routers will build connection between each other[...]

Vigor2800 Series User’s Guide 96 User B connects a router with FXS port and accesses Internet through WAN port of that router. When B calls A, the voice signal will be sent to a remote router (C) through Internet. Then, the voice signal w ill be passed to switchboard (via S0 intern ) and transferred to A through ISDN line (leaving Internet). Such[...]

Vigor2800 Series User’s Guide 97 Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any num ber you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your frien[...]

Vigor2800 Series User’s Guide 98 Enable Check this box to invoke this setting. Prefix Number The phone number set here is used to add, strip, or replace the OP number. Mode None - No action. Add - When you choose this mode, the OP number will be added with the prefix number for calling out through the specific VoIP interface. Strip - When you cho[...]

Vigor2800 Series User’s Guide 99 Min Len Set the minimal length of the dial number for appl ying the prefix number settings. Take the above picture (Prefix Table Setup web page) as an example, if the dial number between 7 and 9, that number can apply the prefix num ber settings here. Max Len Set the maximum length of the dail number for applying [...]

Vigor2800 Series User’s Guide 100 SIP PING interval The default value is 150sec. It is useful for a Nortel server NAT Traversal Support. Status Show the status for the corresponding SIP account. R means such account is registered on SIP server successfully. – means the account is failed to register on SIP server. Profile Name Assign a name for [...]

Vigor2800 Series User’s Guide 101 Display Name The caller-ID that you want to be displayed on your friend’s screen. Account Number/Name Enter your account name of SIP Address, e.g. every text before @. Authentication ID Check the box to invoke this function and enter the name or number used for SIP Authorization with SIP Registrar. If this sett[...]

Vigor2800 Series User’s Guide 102 Below shows successful SIP accounts for your reference. 3 3 . . 9 9 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone settings for VoIP 1 and VoIP 2 respectively. Note: ISDN port (Index 3) is available for th e users living in Europe and using Vigor 2800VGi only. Phone[...]

Vigor2800 Series User’s Guide 103 configured in the advanced settings page of Phone Index. Default SIP Account – “draytel_1” is the default SIP account. You can click the number below the Index field to change SIP account for each phone port. DTMF Relay – Display DTMF mode that configured in the advanced settings page of Phone Index. RTP [...]

Vigor2800 Series User’s Guide 104 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r V V o o I I P P 1 1 a a n n d d 2 2 Click the number 1 or 2 link under Index column, you can access into the following page for configuring Phone settings. Hotline Check the box to enable it. Type in the SIP URL in the field for dialing a[...]

Vigor2800 Series User’s Guide 105 Call Waiting Check this box to invoke this function. A notice sound will appear to tell the user new phone call is waiting for your response. Click hook flash to pick up the waiting phone call. Call Transfer Check this box to invoke this function. Click hook flash to initiate another phone call. Wh en the phone c[...]

Vigor2800 Series User’s Guide 106 To change ISDN call into VoIP call, please dial the character in this field for transferring. The character that you can type can be *, #, and 0~9. To VoIP (for ISDN) - The router is set by using VoIP call. To change VoIP call into ISDN call, please dial the character in this field for transferring. The character[...]

Vigor2800 Series User’s Guide 107 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Caller ID Type There are several standards provided here for displaying the caller ID on the panel of the telephone set. Choose the one that is suitable for the phone set according to[...]

Vigor2800 Series User’s Guide 108 Payload Type (rfc2833) – Choose a number from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N ( ( a a v v a a i i l l a a b b l l e e f f o o r r V V G G i i m m o o d d e [...]

Vigor2800 Series User’s Guide 109 Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call. During the period, the one who dial in will listen bus y tone, yet the local user will not listen any ring tone. Schedule - Enter the in[...]

Vigor2800 Series User’s Guide 110 account registered FXO Feature Enable ISDN to VoIP (On-Net) Calls – Check this box to make all the outgoing calls from ISDN line to be forwarded to receivers by Internet. Enable VoIP to ISDN (Off-Net) Calls –Check this box to make all the incoming calls coming from Internet to be forwarded to receivers by ISD[...]

Vigor2800 Series User’s Guide 111 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC D[...]

Vigor2800 Series User’s Guide 112 Payload Type (rfc2833) – Choose a number from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. Disallow VoIP to ISDN Calls with the Following Prefixes Set the prefix of the phone number to forbid the user dialing through VoIP to ISDN. All the phone number with the [...]

Vigor2800 Series User’s Guide 113 (busy tone). CONNECTING - Indicates that the user is calling out. WAIT_ANS - Indicates that a connection is launched and waiting for remote user’s answer. ALERTING - Indicates that a call is coming. ACTIVE- Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present chann[...]

Vigor2800 Series User’s Guide 114 3 3 . . 1 1 0 0 . . 1 1 G G e e n n e e r r a a l l S S e e t t u u p p This page provides some basic ISDN settings such as enabling the ISDN port or not, MSN numbers and blocked MSN numbers, etc. ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local[...]

Vigor2800 Series User’s Guide 115 3 3 . . 1 1 0 0 . . 2 2 D D i i a a l l i i n n g g t t o o a a S S i i n n g g l l e e I I S S P P If you access the Internet via a single ISP, press this link. ISP Name Enter your ISP name. Dial Number Enter the ISDN access number provided by your ISP. Username Enter the username provided by your ISP. Password [...]

Vigor2800 Series User’s Guide 116 Yes t o invoke this function and enter the IP address in the field of Fixed IP Address . Fixed IP Address Type the IP address. 3 3 . . 1 1 0 0 . . 3 3 D D i i a a l l i i n n g g t t o o D D u u a a l l I I S S P P s s If you have more than one ISP, press this link to confi gure two ISP dialup profiles. You will [...]

Vigor2800 Series User’s Guide 117 As depicted in the above application scenario , the V irtual T A client can make an outgoing call or accept an incoming call to/from a peer F AX machine or ISDN T A, etc. Before you configure the V irtual T A (Remote CAPI) Setup, please install the virtual T A client first. Simply insert the CD bundled with your [...]

Vigor2800 Series User’s Guide 118 V irtual T A Server Enable: Select it to activate the server . Disable: Select it to deactivate the server . All V irtual T A applications will be terminated. Username Enter the username of a specific client. Password Enter the password of a specific client. MSN1/ MSN2/MSN3 MSN stands for Multiple Subscriber Numb[...]

Vigor2800 Series User’s Guide 119 Click the V irtual T A Login tab to launch the login box. Enter the Username/Password and then click OK . After a short time, the VT icon text will turn green. M M S S N N C C o o n n f f i i g g u u r r a a t t i i o o n n If you have applied to an MSN number service, th e V irtual T A server can assign which cl[...]

Vigor2800 Series User’s Guide 120 3 3 . . 1 1 0 0 . . 5 5 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router (only for i m odels) be remotely activated, or be able to dial up to the ISP via the ISDN inte rface. Vigor routers provide this feature which allows you to make a phone call to the router and then ask it[...]

Vigor2800 Series User’s Guide 121 TCP Header Compression VJ Compr ession - It is used for TCP/IP protocol header compression. Normally it is set to None to improve bandwidth utilization. Idle Timeout Because our ISDN link type is “Dial On Demand”, the connection will be initiated only when needed. High Water Mark and High Water Time BOD stand[...]

Vigor2800 Series User’s Guide 122 loaded with advanced wireless technology Super G TM to lift up data rate up to 108 Mbps*. Hence, you can finally smoothly enjoy stream music and video. Note: * The actual data throughput will vary ac co rding to the network con ditions and environmental factors, including volume of network traffic, network overhe[...]

Vigor2800 Series User’s Guide 123 Example 1 Example 2 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each othe r. To elaborate an example for business use, you may set up a wi[...]

Vigor2800 Series User’s Guide 124 3 3 . . 1 1 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Check the box to enable wi[...]

Vigor2800 Series User’s Guide 125 SSID The default SSID is "default". We suggest you change it to a particular name. It is the identification of the wireless LAN. SSID can be any text numbers or various special characters. Channel The channel of frequency of the wireless LAN. The default channel is 6. You may switch channel if the selec[...]

Vigor2800 Series User’s Guide 126 3 3 . . 1 1 1 1 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP Only - Accepts only WEP clients [...]

Vigor2800 Series User’s Guide 127 authentication. Remember to select WPA type to define either Mixed or WPA2 only in the field below. Since the key will be auto-negotiated during authentication, the field of key setting below will be not available for input. WPA The WPA encrypts each frame transmitted from the radio using the key, which either PS[...]

Vigor2800 Series User’s Guide 128 3 3 . . 1 1 1 1 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wire less LAN MAC address of client. Only the valid MAC address that has been configured can access[...]

Vigor2800 Series User’s Guide 129 Edit Edit the selected MAC address in the list. Cancel Give up the access control set up. OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 3 3 . . 1 1 1 1 . . 5 5 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points[...]

Vigor2800 Series User’s Guide 130 The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be for warded to local wired or wireless hosts. In other words, only Repeater mod[...]

Vigor2800 Series User’s Guide 131 one. Security There are three types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page. If you did not set any ke[...]

Vigor2800 Series User’s Guide 132 If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page and click Add . Later, the MAC address of the AP will be added to the page of WDS setting. 3 3 . . 1 1 1 1 . . 7 7 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of [...]

Vigor2800 Series User’s Guide 133 3 3 . . 1 1 1 1 . . 8 8 S S t t a a t t i i o o n n R R a a t t e e C C o o n n t t r r o o l l This page allows you to cont rol the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting. The range for the rate is between 100 ~ 30,000 kbps. 3 3 . . 1 1 2[...]

Vigor2800 Series User’s Guide 134 Enable Check this box to enable this function (for VLAN Configuration). P1 – P4 Check the box to make the com puter connecting to the port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box. For exam ple, if you check the boxes of[...]

Vigor2800 Series User’s Guide 135 Enable Check this box to invoke wireless VLAN function. Login ID Type Login ID for different groups of W_VLAN with 1 to 1 1 characters. Password Type password for different groups of W_VLAN with 1 to 11 characters. Details Click this button to set additional attributes settings for W_VLAN. Activated Date – Use [...]

Vigor2800 Series User’s Guide 136 Disable broadcast and multicast traffic Check this box to prevent br oadcast and multicast traffic forwarding to all W_VLAN. H H o o w w c c a a n n y y o o u u ( ( w w i i r r e e l l e e s s s s c c l l i i e e n n t t ) ) a a c c c c e e s s s s i i n n t t o o I I n n t t e e r r n n e e t t ? ? After finishi[...]

Vigor2800 Series User’s Guide 137 5. You can go to Diagnostics>>Wireless VLAN Online Station for viewing the connection status whenever you want. 3 3 . . 1 1 2 2 . . 3 3 V V L L A A N N C C r r o o s s s s S S e e t t u u p p This function allows the router to integr ate VLAN and W_VLAN for managing different computers (notebooks). See the [...]

Vigor2800 Series User’s Guide 138 The VLAN >> VALN Cross Setup allows y ou to set a communication bridge between computers in Wireless VLAN and wired VLAN. To achieve the intention of the above illustration, simply check the box under VLAN0 on the line of W_VLAN0. Enable Check this box to invoke VLAN Cross Setup function. VLAN0-3 It represe[...]

Vigor2800 Series User’s Guide 139 3 3 . . 1 1 2 2 . . 4 4 W W i i r r e e d d R R a a t t e e C C o o n n t t r r o o l l Rate Control manages the transmission rate of data in and out throu gh the router. You can also manage the in/out rate of each Ethernet port. Go to VLAN menu and select Wired Rate Control . The following page will appear. Clic[...]

Vigor2800 Series User’s Guide 140 3 3 . . 1 1 2 2 . . 5 5 W W i i r r e e l l e e s s s s R R a a t t e e C C o o n n t t r r o o l l Rate Control manages the transmission rate of data in and out throu gh the router. You can also manage the in/out rate of each wireless VLAN. Go to VLAN menu and select Wireless Rate Control . The following page wi[...]

Vigor2800 Series User’s Guide 141 3 3 . . 1 1 3 3 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items fo[...]

Vigor2800 Series User’s Guide 142 MAC Address Display the MAC address of the WAN Interface. IP Address Display the IP address of the WAN interface. Default Gateway Display the assigned IP address of the default gateway. DNS Display the assigned IP address of the primary DNS. Port Display the available VoIP ports. SIP registrar Display the registe[...]

Vigor2800 Series User’s Guide 143 2. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself. 4. Click Save button, the configuration will download a u tomatically to you[...]

Vigor2800 Series User’s Guide 144 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click Browse button to choose the correct confi guration file for uploading to the router. 3. Click Restore button[...]

Vigor2800 Series User’s Guide 145 Authentication Check this box to activate this function. Some servers might need user name and password for authentication. Therefore, activate this mechanism is required. User Name Thye the user name for the authentication. Password Type the password for the authentication. Click OK to save these settings. For v[...]

Vigor2800 Series User’s Guide 146 3 3 . . 1 1 3 3 . . 5 5 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as ro[...]

Vigor2800 Series User’s Guide 147 3 3 . . 1 1 3 3 . . 6 6 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session. The default value is 50[...]

Vigor2800 Series User’s Guide 148 Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a pr oper name. The default setting is public. Notification Host[...]

Vigor2800 Series User’s Guide 149 3 3 . . 1 1 3 3 . . 8 8 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this ex[...]

Vigor2800 Series User’s Guide 150 3 3 . . 1 1 4 4 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 4 4 . . 1 1 W W A A N N C C o o n n n n e e c c t t i i o o n n Click Diagnostics and click WAN Connection [...]

Vigor2800 Series User’s Guide 151 3 3 . . 1 1 4 4 . . 2 2 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial-out Trigger to open the web pag e. The internet connection (e.g., ISDN, PPPoE, PPPoA, etc) is triggered by a package sending from the source IP address. Decoded Format It shows the source IP addres[...]

Vigor2800 Series User’s Guide 152 3 3 . . 1 1 4 4 . . 4 4 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content of the ARP (Address Resolution Protocol) cache held in the rout er. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Refresh Cl[...]

Vigor2800 Series User’s Guide 153 3 3 . . 1 1 4 4 . . 6 6 N N A A T T S S e e s s s s i i o o n n s s T T a a b b l l e e Click Diagnostics and click NAT Sessions Table to open the setup page. Private IP:Port It indicates the source IP address and port of local PC. #Pseudo Port It indicates the temporary port of the router used for NAT. Peer IP:P[...]

Vigor2800 Series User’s Guide 154 3 3 . . 1 1 4 4 . . 7 7 A A D D S S L L S S p p e e c c t t r r u u m m A A n n a a l l y y s s i i s s Click Diagnostics and click ADSL Spectrum Analysis to open the web page. It will display the bits number status that each BIN carries for upstream/downstream. Below shows two example diagrams for different type[...]

Vigor2800 Series User’s Guide 155 3 3 . . 1 1 4 4 . . 8 8 W W i i r r e e l l e e s s s s V V L L A A N N O O n n l l i i n n e e S S t t a a t t i i o o n n T T a a b b l l e e Click Diagnostics and click Wireless VLAN Online Station Table to open the web page. It will display the IP address, MAC address and Login ID information for all the Wire[...]

Vigor2800 Series User’s Guide 156 3 3 . . 1 1 4 4 . . 1 1 0 0 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management. You have to enable IP bandwidth [...]

Vigor2800 Series User’s Guide 157 IP Address Display the IP address of the monitored device. TX rate (kbps) Display the transmission speed of the monitored device. RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display the session number that you specified in Limit Session web page. Action Block - can prevent specifi[...]

Vigor2800 Series User’s Guide 158 This page is left blank.[...]

Vigor2800 Series User’s Guide 159 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d [...]

Vigor2800 Series User’s Guide 160 For using IPSec -based service, such as IPSec or L2 TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable b[...]

Vigor2800 Series User’s Guide 161 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s sele cted, [...]

Vigor2800 Series User’s Guide 162 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router [...]

Vigor2800 Series User’s Guide 163 2. Then, for using PPP base d services, su ch as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to L[...]

Vigor2800 Series User’s Guide 164 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service is selected, y [...]

Vigor2800 Series User’s Guide 165 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets des tined to the remote network to Router[...]

Vigor2800 Series User’s Guide 166 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

Vigor2800 Series User’s Guide 167 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the rem ote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Securit[...]

Vigor2800 Series User’s Guide 168 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. Y[...]

Vigor2800 Series User’s Guide 169 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router. If a PPP-based service is selected, you should fu rther specify the remote VPN server IP address, Username, Password, and[...]

Vigor2800 Series User’s Guide 170 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he woul[...]

Vigor2800 Series User’s Guide 171 4. Enter the Class Name of Index 2. In this index, she will set reserve bandwidth for HTTPS. And click Basic b u tton on the right. 5. Select HTTPS in the list on the left colu mn and click on ADD to add to right column. Click OK to exit. 6. Check the Enable UDP Bandwidth Control on the bottom to prevent enormous[...]

Vigor2800 Series User’s Guide 172 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.1 68.1.1/255.255.255.0. The built-in DHCP server is enabled so it [...]

Vigor2800 Series User’s Guide 173 T o use another DHCP server in the network rather than the built-in one of V igor Router , you have to change the settings as show below . Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

Vigor2800 Series User’s Guide 174[...]

Vigor2800 Series User’s Guide 175 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers. John?[...]

Vigor2800 Series User’s Guide 176 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: draytel 1 Registe[...]

Vigor2800 Series User’s Guide 177 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling. Arn[...]

Vigor2800 Series User’s Guide 178 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. 1. Insert CD of the router to your CD ROM. 2. From the we[...]

Vigor2800 Series User’s Guide 179 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 12. Type in your router IP, usua[...]

Vigor2800 Series User’s Guide 180 14. Click Send . 15. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r[...]

Vigor2800 Series User’s Guide 181 1. Go to Certificate Management and choose Local Certificate . 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.[...]

Vigor2800 Series User’s Guide 182 4. Connect to CA server via web browser. Follo w the instruction to submit the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate . Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #[...]

Vigor2800 Series User’s Guide 183 Then you have done the request and the ser ver now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate . Now you should get a certificate (.cer file) and save it. 5. Back to Vigor router, go to Local Certificate . Click IMPORT button and browse the file to import the certifica[...]

Vigor2800 Series User’s Guide 184 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA cert[...]

Vigor2800 Series User’s Guide 185 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refres[...]

Vigor2800 Series User’s Guide 186 This page is left blank.[...]

Vigor2800 Series User’s Guide 187 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Che[...]

Vigor2800 Series User’s Guide 188 F F o o r r W W i i n n d d o o w w s s  The example is based on Windows XP. As to the examples for other operation systems, please refer to the si milar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s. 2. Right-click on Local Area Connectio[...]

Vigor2800 Series User’s Guide 189 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configure[...]

Vigor2800 Series User’s Guide 190 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router. The most impor[...]

Vigor2800 Series User’s Guide 191 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click Internet Access group and then check whether the ISP settings are set correctly. F F o o r r P P P P P P o o E E / / P P P P P P o o A A U U s s e e r r s s 1. [...]

Vigor2800 Series User’s Guide 192 F F o o r r M M P P o o A A U U s s e e r r s s 1. Check if the Enable option for Broadband Access is selected. 2. Check if all parameters of DSL Modem Settings are entered with correct value that provided by your ISP. Especially, check if the encapsulation is selected properly or not (it should be the same with [...]

Vigor2800 Series User’s Guide 193 5 5 . . 5 5 B B a a c c k k i i n n g g t t o o F F a a c c t t o o r r y y D D e e f f a a u u l l t t S S e e t t t t i i n n g g I I f f N N e e c c e e s s s s a a r r y y Sometimes, a wrong connection can be im proved by returning to the default settings. Try to reset the router by software or hardware. Warn[...]