Draytek 2900 manual

Vigor2900 Series Security Router User’s Guide Version: 2.0 Date: 2006/1/16 Copyright 2005 All rights reserve d. This publication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval syst em, or translated into any lang u age without written permission from the copyright h[...]

Vigor2900 Series User’s Guide ii[...]

Vigor2900 Series User’s Guide iii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 LED Indicators and Connectors .............................................................................................. [...]

Vigor2900 Series User’s Guide iv 3.1 Dynamic DNS Setup .......................................................................................................... ... 53 3.2 Call Control and PPP/MP Setup ........................................................................................... 55 3.3 Call Sche dule Se tup.........................[...]

Vigor2900 Series User’s Guide v 4.7.2 Triggered Dial- out Packet Header ................................................................................ 132 4.7.3 Viewing R outing Table .................................................................................................. 13 2 4.7.4 View ARP Cache Table ...............................[...]

[...]

Vigor2900 Series User’s Guide 1 1 P P r r e e f f a a c c e e Targeting requirement for residential, SOHO (Small Office and Home Office) and business users, the Vigor2900 series provides ex ceptional bandwidth for Internet access. To secure your network, the Vigor2900 series pr ovides an advanced firewall with advanced features, such as NAT with [...]

Vigor2900 Series User’s Guide 2 1 1 . . 1 1 . . 1 1 F F r r o o n n t t a a n n d d R R e e a a r r V V i i e e w w f f o o r r V V i i g g o o r r 2 2 9 9 0 0 0 0 ACT DMZ QoS Attack VPN Printer W AN P1 P2 P3 P4 LAN LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. DMZ On DMZ Host is specified in certai[...]

Vigor2900 Series User’s Guide 3 1 1 . . 1 1 . . 2 2 F F r r o o n n t t a a n n d d R R e e a a r r V V i i e e w w f f o o r r V V i i g g o o r r 2 2 9 9 0 0 0 0 G G ACT QoS WLAN Attack VP N Printer WAN P1 P2 P3 P4 LAN LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. QoS On The QoS function is active[...]

Vigor2900 Series User’s Guide 4 1 1 . . 1 1 . . 3 3 F F r r o o n n t t a a n n d d R R e e a a r r V V i i e e w w f f o o r r V V i i g g o o r r 2 2 9 9 0 0 0 0 G G i i ACT ISDN WLAN Attack VPN Printer WAN P1 P2 P3 P4 LAN LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. On The ISDN network is correc[...]

Vigor2900 Series User’s Guide 5 1 1 . . 1 1 . . 4 4 F F r r o o n n t t a a n n d d R R e e a a r r V V i i e e w w f f o o r r V V i i g g o o r r 2 2 9 9 0 0 0 0 i i ACT ISDN QoS Attack VPN Printer W AN P1 P2 P3 P4 LAN LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. On The ISDN network is correctly [...]

Vigor2900 Series User’s Guide 6 1 1 . . 1 1 . . 5 5 F F r r o o n n t t a a n n d d R R e e a a r r V V i i e e w w f f o o r r V V i i g g o o r r 2 2 9 9 0 0 0 0 V V LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. QoS On The QoS function is active. On The phone is off hook (the handset of phone is h[...]

Vigor2900 Series User’s Guide 7 1 1 . . 1 1 . . 6 6 F F r r o o n n t t a a n n d d R R e e a a r r V V i i e e w w f f o o r r V V i i g g o o r r 2 2 9 9 0 0 0 0 V V G G LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. QoS On The QoS function is active. On The phone is off hook (the handset of phone [...]

Vigor2900 Series User’s Guide 8 1 1 . . 1 1 . . 7 7 F F r r o o n n t t a a n n d d R R e e a a r r V V i i e e w w f f o o r r V V i i g g o o r r 2 2 9 9 0 0 0 0 V V G G i i LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. On The ISDN network is correctly setup. ISDN Blinking A successful remote conn[...]

Vigor2900 Series User’s Guide 9 1 1 . . 1 1 . . 8 8 F F r r o o n n t t a a n n d d R R e e a a r r V V i i e e w w f f o o r r V V i i g g o o r r 2 2 9 9 0 0 0 0 V V i i LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. On The ISDN network is correctly setup. ISDN Blinking A successful remote connecti[...]

Vigor2900 Series User’s Guide 10 1 1 . . 2 2 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect this device to a router with an Ethernet cable. 2. Connect one port of 4-port switch to your computer with a RJ-45 cable. This [...]

Vigor2900 Series User’s Guide 11 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator and [...]

Vigor2900 Series User’s Guide 12 Notice: Some of the settings might not appear as above, because the hom e page will change slightly according to the featur es that your router has. 4. Click Administrator Password Setup from the Basic Setup group. 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type a new one in[...]

Vigor2900 Series User’s Guide 13 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After typing the password[...]

Vigor2900 Series User’s Guide 14 Please select the appropriate time zone for the router. Then, click Next . 2 2 . . 2 2 . . 1 1 S S e e l l e e c c t t i i n n g g P P r r o o t t o o c c o o l l In the Quick Start Wizard , you can configure the router to access the Internet with different protocol/modes such as PPPoE , PPTP, L2TP, Static IP or D[...]

Vigor2900 Series User’s Guide 15 PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet. Your service provider will provide you information about user name, password, and authentication mode. If your ISP provides you the PPPoE connection, please select PPPoE for this router. The follow[...]

Vigor2900 Series User’s Guide 16 2 2 . . 2 2 . . 3 3 P P P P T T P P For PPTP connection, please click PPTP as the protocol. Click Next to see the following page. User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Retype Password Retype the password. Obtain an IP address automati[...]

Vigor2900 Series User’s Guide 17 PPTP Server IP Specify the IP address of the PPTP Server. After finishing the settings in this page, click Next to see the following page. Click Finish to save current settings and restart the router.[...]

Vigor2900 Series User’s Guide 18 2 2 . . 2 2 . . 4 4 L L 2 2 T T P P Note: This setting is available only for Vigor 2900, Vigor 2900G, Vigor 2900Gi and Vigor 2900i . Click L2TP as the protocol. Click Next to see the following page. User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the IS[...]

Vigor2900 Series User’s Guide 19 Subnet Mask Type the subnet mask. PPTP Server IP Specify the IP address of the PPTP Server. After finishing the settings in this page, click Next to see the following page. Click Finish to save current settings and restart the router. 2 2 . . 2 2 . . 5 5 S S t t a a t t i i c c I I P P Click Static IP as the proto[...]

Vigor2900 Series User’s Guide 20 Click Next to see the following page. WAN IP Type the WAN IP address that obtained from ISP. Subnet Mask Type the subnet mask obtained from ISP. Gateway Type the gateway address obtained from ISP. Primary DNS Type the IP address as the primary DNS obtained from ISP. Second DNS Type the IP address as the secondary [...]

Vigor2900 Series User’s Guide 21 2 2 . . 2 2 . . 6 6 D D H H C C P P Click DHCP as the protocol. Click Next to see the following page. Host Name Specify the host name for the router. MAC This is an optional setting. The router will detect the MAC address automatically. If not, click Clone MAC Address to obtain it. Type in all the information that[...]

Vigor2900 Series User’s Guide 22 Click Finish to save current settings and restart the router. 2 2 . . 3 3 L L A A N N T T C C P P / / I I P P a a n n d d D D H H C C P P S S e e r r v v e e r r B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router is NA T . It creates a private subnet of your own. As mentioned pr[...]

Vigor2900 Series User’s Guide 23 will serve for IP routing to help hosts in th e public subnet to communicate with other public hosts or servers outside. Therefore, the router shoul d be set as the gateway for public hosts. W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o [...]

Vigor2900 Series User’s Guide 24 W W h h a a t t a a r r e e V V i i r r t t u u a a l l L L A A N N s s Y ou can group local hosts by physical ports and create up to 4 virtual LANs. T o manage the communication between different groups, please set up rules in V irtual LAN (VLAN) function and the rate of each. W W e e b b P P a a g g e e C C o o [...]

Vigor2900 Series User’s Guide 25 2 nd DHCP Se rver Y ou can configure the router to serve as a DHCP server for the 2nd subnet. S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.135.240.1, the starti ng IP address must be 220.135.240.2 or[...]

Vigor2900 Series User’s Guide 26 DHCP server for your network. If you want to use another DHCP server in the network other than the V igor Router ’ s, you can let Relay Agent help you to redirect the DHCP request to the specified location. Enable Server - Let the router assign IP address to every host in the LAN. Disable Server – Let you manu[...]

Vigor2900 Series User’s Guide 27 2 2 . . 4 4 I I S S D D N N S S e e t t u u p p ISDN stands for Integrated Services Digital Netw ork. It is an international communications standard for sending voice, video, and data over digit al telephone lines or normal telephone wires. Note: The following is availab le for Vigor2900VGi/Vi only. ISDN Port Clic[...]

Vigor2900 Series User’s Guide 28 which can simulate a real ISDN terminal adapter installed on your computer. You can install the CAPI-compliant software for dial-up netw orking, fax or voice applications de pending on the functionality of the CAPI software you installed. To employ the VTA feature, please download the VTA drivers (available only t[...]

Vigor2900 Series User’s Guide 29 S S e e c c u u r r i i t t y y O O v v e e r r v v i i e e w w Real-time Hardware Encryption: Vigor Router is equipped with a hardware AES encryptio n engine so it can apply the highest prote ction to your data without influencing user experience. Complete Security Standard Selection: To ensure the security and p[...]

Vigor2900 Series User’s Guide 30 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quaran tine or limit access reasons. To isolate means neither of the parties can access each other. To elaborate an example for business use, you may set up a wireless LAN for visito[...]

Vigor2900 Series User’s Guide 31 2 2 . . 5 5 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Check the box to enable wireles[...]

Vigor2900 Series User’s Guide 32 LAN. SSID can be any text numbers or various special characters. Channel The channel of frequency of the wireless LAN. The default channel is 6. You may switch channel if the selected channel is under serious interference. Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized cli[...]

Vigor2900 Series User’s Guide 33 2 2 . . 5 5 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP Only - Accepts only WEP clients and t[...]

Vigor2900 Series User’s Guide 34 applicable if you select WPA/PSK. WEP/802.1x or WPA/802.1x - Accept WEP or WPA clients with 802.1x authentication. Only Mixed(WPA+WPA2) is applicable if you select WPA/PSK. Since the key will be auto-negotiated during authentication, the field of key setting below will be not available for input. WPA/PSK Only - Ac[...]

Vigor2900 Series User’s Guide 35 All wireless devices must support the same WEP encryption bit size and have the same key . Four keys can be entered here, but only one key can be selected at a time. The keys can be entered in ASCII or Hexadeci mal. Check the key you wish to use. 2 2 . . 5 5 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o [...]

Vigor2900 Series User’s Guide 36 Client’s MAC Address - Manually enter the MAC address of wireless client. Attribute v - select to apply VPN to the connection of the wireless client of the MAC address. s - select to isolate the wireless connection of the wireless client of the MAC address from LAN. Add Add a new MAC address into the list. Remov[...]

Vigor2900 Series User’s Guide 37 2 2 . . 6 6 I I n n t t e e r r n n e e t t A A c c c c e e s s s s S S e e t t u u p p Quick Start Wizard offers user an easy method to quick setup the connection mode for the router. Moreover, if you want to adjust more settings for different WAN modes, please go to Quick Setup group and click the Internet Acces[...]

Vigor2900 Series User’s Guide 38 If your router supports ISDN function, you w ill get the following page with ISDN dial-up Internet Access. The following sections will introd uce the Internet Access Modes. 2 2 . . 6 6 . . 2 2 P P P P P P o o E E As a CPE device, Vigor router encapsulat es the PPP session based for transport across the ADSL loop a[...]

Vigor2900 Series User’s Guide 39 PPPoE Link Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. ISP Name Type in the ISP Name provided by ISP in this field. Username Type in the username provided by ISP in this field. Password Type in [...]

Vigor2900 Series User’s Guide 40 By checking the checkbox Join NAT IP Pool , data from NAT hosts will be round-robin forwarded on a session basis. If you do not check Join NAT IP Pool , you can still use these public[...]

Vigor2900 Series User’s Guide 41 IP addresses for other purpose, su ch as DMZ host, Open Ports. WAN physical type Check and choose a proper type used for duplex between this device and other router that you want to comm unicate. Both sides should use the same physical type; otherwise, the connection might be failed due to inconsistent type. It is[...]

Vigor2900 Series User’s Guide 42 Access Control Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. ISDN Dial Backup Setup This setting is available for the routers supporting ISDN function only. Before utilizing the ISDN dial backup f[...]

Vigor2900 Series User’s Guide 43 PING Interval - Enter the interval for the system to execute the PING operation. WAN physical type Check and choose a proper type used for duplex between this device and other router that you want to communicate. Both sides should use the same physical type; otherwise, the connection might be failed due to inconsi[...]

Vigor2900 Series User’s Guide 44 Specify an IP address – Click this radio button to specify some data if you want to use Static IP m ode. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. Gateway IP Address – Type the gateway IP address. DNS Server IP Address Type in the primary IP address for the router if you want to[...]

Vigor2900 Series User’s Guide 45 PPTP Setup PPTP Link - Click Enable to enable a PPTP client to establish a tunnel to a DSL modem on the WAN interface. PPTP Server - Specify the IP address of the PPTP server. ISP Access Setup ISP Name - Type in the ISP Name provided by ISP in this field. Username -Type in the username provided by ISP in this fiel[...]

Vigor2900 Series User’s Guide 46 Idle Timeout - Set the timeout for breaking down the Internet after passing through the time without any action. IP Address Assignment Method(IPCP) Fixed IP - Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the [...]

Vigor2900 Series User’s Guide 47 L2TP Setup L2TP Link - Click Enable to enable a L2TP client to establish a tunnel to a DSL modem on the WAN interface. L2TP Server - Specify the IP address of the L2TP server. ISP Access Setup ISP Name - Type in the ISP Name provided by ISP in this field. Username -Type in the username provided by ISP in this fiel[...]

Vigor2900 Series User’s Guide 48 use the same physical type; otherwise, the connection might be failed due to inconsistent type. It is recommended for you to set Auto negotiation as the physical type. 2 2 . . 6 6 . . 6 6 D D i i a a l l i i n n g g t t o o a a S S i i n n g g l l e e I I S S P P If you access the Internet via a single ISP, press [...]

Vigor2900 Series User’s Guide 49 Idle Timeout Idle timeout means the ro uter will be disconnect after being idle for a preset amount of time. The default is 180 seconds. If you set the time to 0, the ISDN connection to the ISP will always remain on. Fixed IP In most environments, you should not change these settings as most ISPs provide a dynamic[...]

Vigor2900 Series User’s Guide 50 z The V irtual T A client onl y supports the CAPI 2.0 protocol and has no built-in F AX engine. z One ISDN BRI interface has two B channels. The maximum number of active clients is also two. z Before you configure the V irtual T A, you must set the correct country code. As depicted in the above application scenari[...]

Vigor2900 Series User’s Guide 51 V irtual T A S erver Enable: Select it to activate the server . Disable: Select it to deactivate the server . All V irtual T A applications will be terminated. Username Enter the username of a specific client. Password Enter the password of a specific client. MSN1/ MSN2/MSN3 MSN stands for Multiple Subscriber Numb[...]

Vigor2900 Series User’s Guide 52 On the client - Right-click the mouse on the VT icon. The following pop-up menu will be shown. Click the V irtual T A Login tab to launch the login box. Enter the Username/Password and then click OK . Aft er a short time, the VT icon text will turn green. M M S S N N C C o o n n f f i i g g u u r r a a t t i i o o[...]

Vigor2900 Series User’s Guide 53 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed infor[...]

Vigor2900 Series User’s Guide 54 Active Display if this account is active or inactive. View Log It opens another dialog and shows log for DDNS information. Force Update Click this button to get the newest DDNS inform ation. 3. Select Index number 1 to add an account for the router. Check Enable Dynamic DNS Account, and choose correct Service Prov[...]

Vigor2900 Series User’s Guide 55 3 3 . . 2 2 C C a a l l l l C C o o n n t t r r o o l l a a n n d d P P P P P P / / M M P P S S e e t t u u p p Some applications require that the router (only for the i m odels) be remotely activated, or be able to dial up to the ISP via the ISDN inte rface. Vigor routers provide this feature which allows you to [...]

Vigor2900 Series User’s Guide 56 PPP Authentication It specifies the PPP authentication method for PPP/MP connections. Normally you can set it to PA P / C H A P f or better compatibility . TCP Header Compression VJ Compr es sion - It is used for TCP/IP protocol header compression. Normally it is set to None to improve bandwidth utilization. Idle [...]

Vigor2900 Series User’s Guide 57 Index Click the num ber below Index to access into the setting page of schedule. Status Display if this schedule setting is active or inactive. You can set up to 15 schedules. Then you can apply them to your Internet Acce ss or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule, please click any[...]

Vigor2900 Series User’s Guide 58 Disable Dial-On-Demand - Specify the connection to be up when it has traffic on the line. Once there is no traffic over idle timeout, the connection will be down and never up again durin g the schedule. Idle Timeout Specify the duration (or period) for the schedule. How often Specify how often the schedule will be[...]

Vigor2900 Series User’s Guide 59 On NAT page, you will see the private IP address defined in RFC-1918. Usually we use the 192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or servi ce por ts into different specified services. In other words, the NAT function can be achieved by using port[...]

Vigor2900 Series User’s Guide 60 Service Name Enter the description of the specific network service. Protocol Select the transport layer protocol (TCP or UDP). Public Port Specify which port can be redirected to the specified Private IP and Port of the internal host. Private IP Specify the private IP address of the internal host providing the ser[...]

Vigor2900 Series User’s Guide 61 3 3 . . 4 4 . . 2 2 D D M M Z Z H H o o s s t t S S e e t t u u p p As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (A H), do not t[...]

Vigor2900 Series User’s Guide 62 Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this button and then a window will autom atically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN networ[...]

Vigor2900 Series User’s Guide 63 Index Indicate the relative number for the particular entry that you want to offer service in a local host. You should click the appropriate index number to edit or clear the corresponding entry. Comment Specify the name for the defined network service. Aux. WAN IP Display the private IP address of the local host [...]

Vigor2900 Series User’s Guide 64 However, if you previously have set up WAN Alias in Internet Access>>PPPoE, you will find that WAN IP appeared for your selection. Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. Local Computer Enter the private IP address of the local host or cl[...]

Vigor2900 Series User’s Guide 65 3 3 . . 4 4 . . 4 4 V V i i e e w w W W e e l l l l - - K K n n o o w w n n P P o o r r t t s s L L i i s s t t There is a list providing some well-known port numbers of certain services/applications for your reference. 3 3 . . 4 4 . . 5 5 M M u u l l t t i i - - N N A A T T S S e e t t u u p p If you have a group[...]

Vigor2900 Series User’s Guide 66 When you press the WAN IP Alias button, a window will show up for you to in put other public IP addresses. The Join NAT IP Pool check box indicates that the local users can use this IP to connect to the Internet. If you do not ch ick this check box, this IP addre ss will not be available to the local users. After [...]

Vigor2900 Series User’s Guide 67 3 3 . . 5 5 R R A A D D I I U U S S S S e e t t u u p p Remote Authentication Dial-In User Servi ce (RADIUS) is a security authentication client/server protocol that supports authenti cation, authorization and accounting, which is widely used by Internet service providers. It is the most common method of authentic[...]

Vigor2900 Series User’s Guide 68 Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent be tween them. Both sides must be configured to use the same shared secret. Re-type Shared Secret Re-type the Shared Secret for confirmation. 3 3 . . 6 6 S S t t a a t t i i c c R R o o u u t t e e S S e e t t [...]

Vigor2900 Series User’s Guide 69 is that those hosts on the intern al private subnets (ex. 192.168.10.0/24) can access the Internet via the router , and continuously exchange of IP routing information with dif ferent subnets. 2. Click Index Number 1 from the S tatic Route Configuration page. Please add a static route as shown below , which regula[...]

Vigor2900 Series User’s Guide 70 D D e e l l e e t t e e S S t t a a t t i i c c R R o o u u t t e e 1. Click the Index Number that you want to delete from the S tatic Route Configuration page. 2. Select Empty/Clear from the drop-down menu, and then click the OK button to delete the route.[...]

Vigor2900 Series User’s Guide 71 D D e e a a c c t t i i v v a a t t e e S S t t a a t t i i c c R R o o u u t t e e 1. Click the Index Number that you want to disable from the S tatic Route Configuration page. 2. Select Inactive/Disable from the drop-down menu, and then click the OK button to delete the route.[...]

Vigor2900 Series User’s Guide 72 3 3 . . 7 7 I I P P F F i i l l t t e e r r / / F F i i r r e e w w a a l l l l S S e e t t u u p p 3 3 . . 7 7 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has b[...]

Vigor2900 Series User’s Guide 73 z Data Filter - When there is an existing Internet connection, Data Filter is applied to incoming and outgoing traffic. It will check pack ets according to t he filter rules. If legal, the packet will pass the router. The following illustrations are flow charts e xplaining how router will treat incoming traffic an[...]

Vigor2900 Series User’s Guide 74 D D e e n n i i a a l l o o f f S S e e r r v v i i c c e e ( ( D D o o S S ) ) D D e e f f e e n n s s e e The DoS Defense functionality helps you to detect and mitigate the DoS attack. The attacks are usually categorized into two types, the fl ooding-type attacks and the vulnerability attacks. The flooding-type [...]

Vigor2900 Series User’s Guide 75 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r ( ( f f o o r r V V m m o o d d e e l l s s o o n n l l y y ) ) We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a r esponsible parent or employer, you should protect those i n your trust a[...]

Vigor2900 Series User’s Guide 76 Filter Rule Click a button numbered (1 ~ 7) to ed it the filter rule. Click the button will open Edit Filter Rule web page. For the detailed information, refer to the following page. Active Enable or disable the filter rule. Comment Enter filter set comments/d escription. Maxi mum length is 23–character long Nex[...]

Vigor2900 Series User’s Guide 77 Pass or Block Specifies the action to be taken when packets match the rule. Block Immediately - Packets matching the rule will be dropped immediately. Pass Immediately - Packets matching the rule will be passed immediately. Block If No Further Match - A packet matching the rule, and that does not match further rul[...]

Vigor2900 Series User’s Guide 78 Don’t care - No action will be taken towards fragmented packets. Unfragmented - Apply the rule to unfragmented packets. Fragmented - Apply the rule to fragmented packets. Too Short - Apply the rule only to packets that are too short to contain a complete header. IP Address Specify a source and destination IP add[...]

Vigor2900 Series User’s Guide 79 E E x x a a m m p p l l e e o o f f R R e e s s t t r r i i c c t t i i n n g g U U n n a a u u t t h h o o r r i i z z e e d d I I n n t t e e r r n n e e t t S S e e r r v v i i c c e e s s To set a simple example to restrict some one from accessing WWW services, we assume the IP address of the access-restricted[...]

Vigor2900 Series User’s Guide 80 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Log Flag For troubleshooting needs you can specify the filter log here. None - The log function[...]

Vigor2900 Series User’s Guide 81 Active Check this box to invoke th is setting. MAC Address Type in the MAC Address of the device that the router connects to. Pass Scheduler (1..15) Let the device with the specific MAC address to be passed within certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in C[...]

Vigor2900 Series User’s Guide 82 Enable Dos Defense Check the box to activate the DoS Defense Functionality. Enable SYN flood defense Check the box to activate the SYN flood defense function. Once detecting the Threshold of the TCP SYN packets has exceeded the defined value, the Vigor router will start to discard the subsequent TCP SYN packets fo[...]

Vigor2900 Series User’s Guide 83 header. The reason for limitation is IP option appears to be a vulnerability of the security for the LAN because it will carry significant information, such as security, TCC (closed user group) parameters, a series of Internet addresses, routing messages...etc. An eavesdropper outside might learn the details of yo[...]

Vigor2900 Series User’s Guide 84 the protocol types greater than 100 are reserved and undefined at this time. Therefore, the router should have ability to detect and reject this kind of packets. Warning Messages We provide Syslog function for user to retrieve message from Vigor router. The user, as a Syslog Server, shall receive the report sendin[...]

Vigor2900 Series User’s Guide 85 Enable URL Access Control Check the box to activate URL Access Control. Block websites with matching keywords Click this button to restrict accessing into the corresponding webpage with the keywords listed on the box below. Allow websites with matching keywords Click this button to allow accessing into the corresp[...]

Vigor2900 Series User’s Guide 86 Prevent web access from IP address Check the box to deny any web surfing activity using IP address, such as http://202.6.3.2. The reason for this is to prevent someone dodges the URL Access Control. Y ou must clear your browser cache first so that the URL content filtering facility operates properly on a web page [...]

Vigor2900 Series User’s Guide 87 3 3 . . 7 7 . . 6 6 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r ( ( f f o o r r V V m m o o d d e e l l s s o o n n l l y y ) ) Choose IP Filter/Firewall Setup on the Advanced Setup group and click the Web Content Filter link. For this section, please refer to Web Content Filter user’s guide.[...]

Vigor2900 Series User’s Guide 88 3 3 . . 7 7 . . 7 7 I I M M B B l l o o c c k k i i n n g g IM Blocking means instant messenger blocki ng. You will see a list of common IM (such as MSN, Yahoo, ICQ/AQL) applications. Check Enable IM Blocking and select the one(s) that you want to block. To bloc k selected IM appli cations during specific periods,[...]

Vigor2900 Series User’s Guide 89 Action Specify the action for each protocol. Allow – Allow the client to access into th e application through the specified protocol. Disallow – Forbid the client to access into the application through the specified protocol. Disallow upload – Forbid the client to access into the application through the spec[...]

Vigor2900 Series User’s Guide 90 3 3 . . 8 8 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s S S e e t t u u p p A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Intern et. In short, by VPN technolog y, you can send data between two compu[...]

Vigor2900 Series User’s Guide 91 Dial-In PPP Authentication PAP Only - Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP or CHAP - Selecting this option means the router will attempt to authenticate dial-in users with the CHAP protocol first. If the dial-in user does not support this protocol, it will[...]

Vigor2900 Series User’s Guide 92 3 3 . . 8 8 . . 3 3 V V P P N N I I K K E E / / I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration. There are two phases of IPSec. ¾ Phase 1: negotiation of IKE parameters including encryption, hash, Diffie-Hellman parameter value[...]

Vigor2900 Series User’s Guide 93 (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. 3 3 . . 8 8 . . 4 4 R R e e m m o o t t e e U U s s e e r r P P r r o o f f i i l l e e S S e e t t u u p p ( ( T T e e l l e e w w o o r r k k e e r r ) ) You can manage[...]

Vigor2900 Series User’s Guide 94 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback function be[...]

Vigor2900 Series User’s Guide 95 IKE Pre-Shared Key Check the box of Pre-Shared Key to invoke this function and type in the required characters (1-63) as the pre-shared key. IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy when you specify the remote node. Check the Medium, DES, 3DES or AES box as [...]

Vigor2900 Series User’s Guide 96 Click to clear all indexes. Name Indicate the name of the LAN-to-LAN profile. The symbol ??? represents that the profile is empty Status Indicate the status of individual profiles. The symbol V and X represent the profile to be active and inactive, respectively. Click each index to edit each profile and y ou will [...]

Vigor2900 Series User’s Guide 97 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. Call Direction Specify the allowed call direction of this LAN-to-LAN profile. Both :-initiator/responder Dial-Out - initiator only Dial-In- responder only. Always On or Idle Timeout Al[...]

Vigor2900 Series User’s Guide 98 User Name This field is applicable when you select PPTP or L2TP w/ or w/out IPSec policy above. Password This field is applicable when you select PPTP or L2TP w/ or w/out IPSec policy above. PPP Authentication This field is applicable when you select PPTP or L2TP w/ or w/out IPSec policy above. PAP/CHAP is the mos[...]

Vigor2900 Series User’s Guide 99 Main mode. IKE phase 1 proposal- To propose the local available authentication schemes and encryption algorithms to the VPN peers, and get its feedback to find a match. Two combinations are available for Aggressive mode and nine for Main mode. We suggest you select the combination that covers the most schemes. IKE[...]

Vigor2900 Series User’s Guide 100 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback function below. You should set the User Name and Password of remote dial-in user below. This feature is useful for i model only. PPTP Allow the remote dial-in [...]

Vigor2900 Series User’s Guide 101 methods on the right side. If you uncheck the checkbox , the connection type you select above will apply the authentication methods and security methods in the general settings. User Name This field is applicable when you select PPTP or L2TP w/ or w/out IPSec policy above. Password This field is applicable when y[...]

Vigor2900 Series User’s Guide 102 phase. If the PPP IP address is fixed by remote side, specify the fixed IP address here. Remote Network IP/ Remote Network Mask Add a static router to direct all traffic destined to this Remote Network IP Address/ Remote Network Mask through the VPN connection. For IPSec, this is the destination clients IDs of ph[...]

Vigor2900 Series User’s Guide 103 your applications to operate. This has to manually set up port mappings or use other similar methods. The screenshots below show examples of this facility . The UPnP facility on the router enables UPnP aware applications such as MSN Messenger to discover what are behind a NA T router . The application will also l[...]

Vigor2900 Series User’s Guide 104 ¾ Some Microsoft operating systems ha ve found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches. ¾ Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings [...]

Vigor2900 Series User’s Guide 105 The major benefit of this mode is that you don ’t have to memorize your friend’s IP address, which might change very frequently if it’s dynamic. Instead of that, you will only have to using dial plan or directly dial your friend’s account name if you are with the same SIP Registrar. Please refer to the Ex[...]

Vigor2900 Series User’s Guide 106 3 3 . . 1 1 0 0 . . 1 1 D D i i a a l l P P l l a a n n S S e e t t u u p p In this section, you can set your VoIP contacts in the “phonebook” we called DialPlan - help you to make calls quickly and easily by using “speed-dial” Phone Number . There are total 60 index entries in the DialPlan for you to sto[...]

Vigor2900 Series User’s Guide 107 3 3 . . 1 1 0 0 . . 2 2 S S I I P P R R e e l l a a t t e e d d F F u u n n c c t t i i o o n n s s S S e e t t u u p p In this section, you set up your own SIP setti ngs. When you apply for an account, your SIP service provider will give you an Account Name or user name, SIP Registrar, Proxy, and Domain name . ([...]

Vigor2900 Series User’s Guide 108 choose None and check the box to achieve the goal. Some SIP server allows user to use VoIP function without registering. For such server, please check the box of make call without register . Choosing Auto is recommended. The system will select a proper way for your VoIP call. Display Name You can enter any string[...]

Vigor2900 Series User’s Guide 109 3 3 . . 1 1 0 0 . . 3 3 C C O O D D E E C C / / R R T T P P / / D D T T M M F F S S e e t t u u p p The codec used for each call can be negotiated with the peer party before each session. Mic/Speaker Gain Adjust the volume of micropho ne and speaker by entering number from 1- 10. The larger of the number, the lou[...]

Vigor2900 Series User’s Guide 110 will contains 20 ms voice information. The more data contains in a single packet the less overhead it creates but may increase. Voice Active Detector Choose On to enable this function to de tect if the user is talking or not. If it is silent, the Vigor router will take action to save the bandwidth. DTMF Mode InBa[...]

Vigor2900 Series User’s Guide 111 Dial Tone Power Level This setting is used to adjust th e loudness of the dial tone. The smaller the number is, the louder the dial tone is. It is recommended for you to use the default setting. Ring Frequency This setting is used to drive the frequency of the ring tone. It is recommended for you to use the defau[...]

Vigor2900 Series User’s Guide 112 supports, please use the default setting. 3 3 . . 1 1 0 0 . . 5 5 V V o o i i c c e e C C a a l l l l S S t t a a t t u u s s On VoIP call status, you can find codec, connection and other important call status for both VoIP 1 and 2 ports. Refresh Seconds Specify the interval of refre sh time to obtain the latest [...]

Vigor2900 Series User’s Guide 113 Rx Pkts Total number of received voice packets during this connection session. Rx Losts Total number of lost packets during this connection session. Rx Jitter The jitter of received voice packets. In Calls The accumulating in-call times. Out Calls The accumulating out-call times. Volume Gain The volume of present[...]

Vigor2900 Series User’s Guide 114 Enable Check this box to enable this function (for VLAN Configuration). P1 – P4 Check the box to make the com puter connecting to the port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box. For example, if you check the boxes of [...]

Vigor2900 Series User’s Guide 115 3. T o remove VLAN, uncheck the needed box and click OK to save the results. 3 3 . . 1 1 2 2 Q Q o o S S C C o o n n t t r r o o l l S S e e t t u u p p Deploying QoS (Quality of Service) management to guarantee that all applications receive the service levels required and sufficient bandwidth to meet performance[...]

Vigor2900 Series User’s Guide 116 Vigor routers as edge routers of DS domain shall check the marked DSCP value in the IP header of bypassing traffic, thus to allocate certain amount of resource execute appropriate policing, classification or scheduling. The co re routers in the backbone will do the same checking before executing treatments in ord[...]

Vigor2900 Series User’s Guide 117 Reserved Bandwidth Ratio It is reserved for the group index in the form of ratio of reserved bandwidth to upstream speed and reserve d bandwidth to downstream speed . Setup There are two-level of settings: Basic - setup Reserved Bandwidth Ratio according to the traffic service type. We provide a list of common se[...]

Vigor2900 Series User’s Guide 118 level type by the system. Please assign one of the levels of the data for processing with QoS control. Service Type – It determines the service type of the data for processing with QoS control. It can also be edited. Simply click Add/Edd/Delete button to access into the following page. You can add a new service[...]

Vigor2900 Series User’s Guide 119 Please type in the service name, select Service typ e (TCP/UDP and both). Next choose either one of the port confi guration type (Single or Range) and type in the range for the Port Number . Enable UDP Bandwidth Control Check this and set the limited bandwidth ratio on the right field. This is a protection of TCP[...]

Vigor2900 Series User’s Guide 120 This page is left blank.[...]

Vigor2900 Series User’s Guide 121 4 S S y y s s t t e e m m M M a a n n a a g g e e m m e e n n t t 4 4 . . 1 1 O O n n l l i i n n e e S S t t a a t t u u s s The Online Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could ge t the current running firmware version or firmware rela[...]

Vigor2900 Series User’s Guide 122 VPN Displays the VPN connection name. Type Displays the VPN connection type. Remote IP Displays the remote IP of VPN connection. Virtual Network Displays the IP address and subnet mask of virtual network. Tx Pkts Displays the total transmitted packets. Tx Rate Displays the speed of transmitted packets. Rx Pkets D[...]

Vigor2900 Series User’s Guide 123 2. Click Backup button to get into the following dialog. 3. Click Save button to open another dialog for saving configuration as a file. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself.[...]

Vigor2900 Series User’s Guide 124 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating examples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available.[...]

Vigor2900 Series User’s Guide 125 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Click Configuration Backup/Restoration on the System Management group. The following window will be popped-up. 2. Click Browse button to choose the correct configura tion file for uploading to the r outer. 3. Click Restore button a[...]

Vigor2900 Series User’s Guide 126 4 4 . . 4 4 S S y y s s L L o o g g / / M M a a i i l l A A l l e e r r t t S S e e t t u u p p SysLog is a popular utility in Unix world. To monitor router activity, you can run a SysLog Daemon to capture all activities from the router. This Daemon program can run on a local PC or a remote one elsewhere on the I[...]

Vigor2900 Series User’s Guide 127 3. From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information , select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router.[...]

Vigor2900 Series User’s Guide 128 The Vigor router will send many types of SysLog messages. Some examples of the SysLog messages with their individual formats are shown below. An example of User Access log message : An example of WAN log message to record the status of VPN/IPSec tunnel : An example of VPN (IPSec) log message to record the status [...]

Vigor2900 Series User’s Guide 129 4 4 . . 5 5 T T i i m m e e S S e e t t u u p p It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time fro m the remote administrator PC host as router’s system tim[...]

Vigor2900 Series User’s Guide 130 4 4 . . 6 6 M M a a n n a a g g e e m m e e n n t t S S e e t t u u p p The port number used to send/receive SIP messag e for building a session. The default value is 5060 and this must match with the peer Registrar when making VoIP calls. Enable remote firmware upgrade Chick the checkbox to allow re mote firmwar[...]

Vigor2900 Series User’s Guide 131 Trap Community Set trap comm unity by typing a proper name. The default setting is public. Notification Host IP Set the IP address of the host that will receive the trap community. Trap Timeout The default setting is 10 seconds. 4 4 . . 7 7 D D i i a a g g n n o o s s t t i i c c T T o o o o l l s s Diagnostic To[...]

Vigor2900 Series User’s Guide 132 Dial ISDN Clicking here causes the router to dial to the preset ISP. Click Internet Access Setup > Dial to a Single ISP to configure dial-up settings. Activity Display the connection name for each B channel. If the B channel is idle, it will show Idle . Drop B1 Click it to disconnect the B1 channel. Drop B2 Cl[...]

Vigor2900 Series User’s Guide 133 Click it to reload the page. In the left of each routing rule, you will see a key. These keys are defined as follows. C --- Directly connected. S --- Static route. R --- RIP. * --- Default route. ~ --- Routes for private routing domain. In the right of each routing rule, you will see an interface identifier which[...]

Vigor2900 Series User’s Guide 134 Click it to clear the whole table. 4 4 . . 7 7 . . 5 5 V V i i e e w w i i n n g g D D H H C C P P A A s s s s i i g g n n e e d d I I P P A A d d d d r r e e s s s s e e s s The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP addres[...]

Vigor2900 Series User’s Guide 135 Click it to reload the page. Each line across the screen indicat es an active session. The following information is displayed: Private IP:Port The internal user’s (PC’s) IP address and port number. #Pseudo Port The public port number. Peer IP:Port The peer user’s (PC’s) IP address and port number. Ifno St[...]

Vigor2900 Series User’s Guide 136 4 4 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e ( ( T T F F T T P P S S e e r r v v e e r r ) ) Before upgrading your router firmware, you need to i n stall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by[...]

Vigor2900 Series User’s Guide 137 5 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 5 5 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d [...]

Vigor2900 Series User’s Guide 138 4. For using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec -based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. Return to VPN and[...]

Vigor2900 Series User’s Guide 139 6. Set Common Settings as shown below. You should enable this pr ofile. 7. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, y ou should further specify the remote peer IP Address, IKE Authentication Method an[...]

Vigor2900 Series User’s Guide 140 8. Set Dial-In settings as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s sele cted, y ou may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in[...]

Vigor2900 Series User’s Guide 141 Settings in Router B in the remote office: 1. Choose VPN and Remote Acce ss Setup on the Advanced Setup group . 2. Select R emot e Access Control Setup . The following page will appear. Enable the necessary VPN service and click OK . 3. Then, return to VPN and Remote Access Setup page and choose PPP General Setup[...]

Vigor2900 Series User’s Guide 142 5. Return to VPN and Remote Access Set u p page and choose LAN-to-LAN Profile Setup. Click on one index number to edit a profile. 6. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 7. Set Dial-Out Settings as shown below to[...]

Vigor2900 Series User’s Guide 143 If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection. 8. Set Dial-In settings as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service is selected, y ou [...]

Vigor2900 Series User’s Guide 144 If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. 9. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A[...]

Vigor2900 Series User’s Guide 145 5 5 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

Vigor2900 Series User’s Guide 146 For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IKE/IPSec General Setup , such as the pre-shar ed key that both parties have known. 5. Return to VPN and Remote Access Set u p page and choose Remote User Profile Setup (Teleworker). Click on one index numb[...]

Vigor2900 Series User’s Guide 147 connection. Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Settings in the remote host: 1. For Win98/ME, you may use "Di[...]

Vigor2900 Series User’s Guide 148 3. In Step 2. Connect to VPN Server , click Insert button to add a new entry. If an IPSec-based service is selected as shown below, You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in V[...]

Vigor2900 Series User’s Guide 149 If a PPP-based service is selected, you should fu rther specify the remote VPN server IP address, Username, Password, and encryption method. The User Name and Password should be consistent with the one set up in the VPN router. To use default gateway on remote network means that all the packets of remote host wil[...]

Vigor2900 Series User’s Guide 150 5 5 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he would use V igor router at home to connect to the server in the headquater of fice downtown via either HTTPS or VPN to check email and acc[...]

Vigor2900 Series User’s Guide 151 7. If the worker has connected to the headqua ter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m ay set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserve bandwidth for 1 VPN tunnel. And click Advanced button on the right. 8. Click [...]

Vigor2900 Series User’s Guide 152 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage. T o use another DHCP server in the network rather than the built-in one of V igor Router , you have to change the settings as show below .[...]

Vigor2900 Series User’s Guide 153 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

Vigor2900 Series User’s Guide 154 5 5 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 5 5 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers. John?[...]

Vigor2900 Series User’s Guide 155 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: draytel 1 Registe[...]

Vigor2900 Series User’s Guide 156 5 5 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Both Arnor and Paulin have Vigor routers respectively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling.[...]

Vigor2900 Series User’s Guide 157 5 5 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i n stall the Router Tools. The Firmware Upgrade Utility is included in the tools. 1. Insert CD of the router to your CD ROM. 2. From the w[...]

Vigor2900 Series User’s Guide 158 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 12. Type in your router IP, usua[...]

Vigor2900 Series User’s Guide 159 14. Click Send . 15. Now the firmware update is finished.[...]

Vigor2900 Series User’s Guide 160 This page is left blank.[...]

Vigor2900 Series User’s Guide 161 6 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the we b configuration. Please follow sections below to check your basic installation status stage by stage. z Ch[...]

Vigor2900 Series User’s Guide 162 F F o o r r W W i i n n d d o o w w s s  The example is based on Windows XP. As to the examples for other operation systems, please refer to the si milar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s. 2. Right-click on Local Area Connectio[...]

Vigor2900 Series User’s Guide 163 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configure[...]

Vigor2900 Series User’s Guide 164 6 6 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most import[...]

Vigor2900 Series User’s Guide 165[...]

Vigor2900 Series User’s Guide 166 6 6 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click Internet Access group and then check whether the ISP settings are set correctly. Here, we take PPPoE for an example. 1. Check if the Enable option is selected. [...]

Vigor2900 Series User’s Guide 167 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the f[...]