Draytek Vigor2830Vn manual

[...]

Vigor2830 Series User’s Guide ii[...]

Vigor2830 Series User’s Guide iii Vigor2830 Series ADSL2+ Security Firewall User’s Guide Version: 2.0 Firmware Version: V3.3.7.1 Date: 25/05/2012[...]

Vigor2830 Series User’s Guide iv Copyright Information Copyright Declarations Copyright 2012 All rights reserved. This pub lication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stor ed in a retrieval system, or translated into any language withou t written permission from the copyright [...]

Vigor2830 Series User’s Guide v European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town ship, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor2830 Ser ies Router DrayTek Corp. declares that Vigor2830 Series of ro uters are in compliance with the following essential requirements and other [...]

Vigor2830 Series User’s Guide vi[...]

Vigor2830 Series User’s Guide vii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s Pref ace .......................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1 1.2 LED [...]

Vigor2830 Series User’s Guide viii 3.3 NA T ........................................................................................................................ ............... 86 3.3.1 Port Re direction ......................................................................................................... ..... 87 3.3.2 DM Z Host .........[...]

Vigor2830 Series User’s Guide ix 3.11.1 Local Ce rtificate ....................................................................................................... ... 205 3.11.2 Trusted CA Certificate ................................................................................................ 20 7 3.11.3 Certific ate Backup ..................[...]

Vigor2830 Series User’s Guide x Application a nd Exampl es ....................................................................... 287 4.1 How to Configure Mult i-Subnet in Vigor2 830 ...................................................................... 287 4.2 How Can I Use FTP to Get the Files from USB S torage Device Connecting to Vigor Route[...]

Vigor2830 Series User’s Guide 1 P P r r e e f f a a c c e e Vigor2830 series is an ADSL2+ router. It inte grates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly,[...]

Vigor2830 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 8 8 3 3 0 0 LED Status Explanation Blinking[...]

Vigor2830 Series User’s Guide 3 Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinkin g). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, re lease the button. Th en the router will restart with the factory default confi guratio[...]

Vigor2830 Series User’s Guide 4 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 8 8 3 3 0 0 n n / / V V i i g g o o r r 2 2 8 8 3 3 0 0 n n - - p p l l u u s s LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On USB device is connected and ready for use. USB Bl[...]

Vigor2830 Series User’s Guide 5 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on once to wait for client device making net work connect ion throug h WPS. Press "Wireless LAN ON/OFF/WPS" butt on twice to enable (WLAN LED on) or disable ( WLAN LED of f) wireless co nnection. Factory Reset Res[...]

Vigor2830 Series User’s Guide 6 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 8 8 3 3 0 0 V V n n LED Status Explanation Blinking The router is powe red on and runnin g normally . ACT (Activity) Off The router is p owered off. On USB device is connected and ready for use. USB Blinking Th e data is transmitting. CSM On The profile(s) of [...]

Vigor2830 Series User’s Guide 7 On The port is conn ected with 1000Mbps. Right LED (Green) Off The por t is connected w ith 10/100Mbps wh en left LED is on.[...]

Vigor2830 Series User’s Guide 8 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on once to wait for client device making net work connect ion throug h WPS. Press "Wireless LAN ON/OFF/WPS" butt on twice to enable (WLAN LED on) or disable ( WLAN LED of f) wireless co nnection. Factory Reset Res[...]

Vigor2830 Series User’s Guide 9 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the ADSL interface to the external ADSL splitter with an ADSL line cable for all models. For Vigor2830Vn, also connect Line inte[...]

Vigor2830 Series User’s Guide 10 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for shar ing printing. All the PCs connected this router can print documents via the router. The exam ple provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please[...]

Vigor2830 Series User’s Guide 11 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port . Click Next .[...]

Vigor2830 Series User’s Guide 12 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next . 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish .[...]

Vigor2830 Series User’s Guide 13 9. Now, your system will ask you to choose right na me of the printer t hat you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next . 10. For the final stage, you need to go back to Control Panel-> Printers and edit the property of the new [...]

Vigor2830 Series User’s Guide 14 The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Note 1: Some printers with the fax/scanning or other additional fun ctions are not supported. If you do not know whether your pr inter is supported or not, please vi sit www.DrayTek.com to [...]

Vigor2830 Series User’s Guide 15 I I n n i i t t i i a a l l C C o o n n f f i i g g u u r r a a t t i i o o n n For using the router properly, it is necessar y for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password for accessing into the web configurator o[...]

Vigor2830 Series User’s Guide 16 4. Now, the Main Screen will appear. Note: The home page will be different slightly in accordance with the ty pe of the router you have. 5. The web page can be logged out according to the chosen condition. The default setting is Auto Logout , which means the web configuration system will logout after 5 m inutes wi[...]

Vigor2830 Series User’s Guide 17 4. Enter the login password (the defa ult is blank) on the field of Old Password . Type New Password . Then click OK to continue. 5. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. 2 2 . . 3 3 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a [...]

Vigor2830 Series User’s Guide 18 On the next page as shown below, please select the WAN interface that you use. If DSL interface is used, please choose WAN1; if Ethernet interface is used, please choose WAN2; if 3G USB modem is used, please choose WAN3. Then click Next for next step. WAN1, WAN2 and WAN3 will bring up different configuration page.[...]

Vigor2830 Series User’s Guide 19 PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet. Your service provider will provide you information about user name, password, and authentication mode. 1. Choose WAN1 as WAN Interface and click the Next button; you will get the following page. Av[...]

Vigor2830 Series User’s Guide 20 Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. 2. After finished the above settings, simply click Next. Available settings are explained as follows: Item Description User Name Type in the valid user name (maximum[...]

Vigor2830 Series User’s Guide 21 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet. 1 1 4 4 8 8 3 3 B B r r i i d d g g e e d d I I P P / / 1 1 4 4 8 8 3 3 R R o o u u t t e e d d I I P P 1. Choose WAN1 as WAN Interface and c[...]

Vigor2830 Series User’s Guide 22 Cancel Click it to give up the quick start wizard. 2. Please type in the IP address/mask/gateway info rmation originally provided by your ISP. Then click Next for viewing summary of such connection. 3. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will[...]

Vigor2830 Series User’s Guide 23 2 2 . . 3 3 . . 2 2 F F o o r r W W A A N N 2 2 ( ( E E t t h h e e r r n n e e t t ) ) WAN2 is dedicated to physical mode in Ethernet. If you choose WAN2, please specify physical type. Then, click Next . On the next page as shown below, please select the appropriate Internet access type according to the informati[...]

Vigor2830 Series User’s Guide 24 1. Choose WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. 2. Click PPPoE as the Internet Access Type. Then click Next to continue. Available settings are explained as follows: Item Description User Name Type in the valid user name (maxim[...]

Vigor2830 Series User’s Guide 25 3. Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet. P P P P T T P P / / L[...]

Vigor2830 Series User’s Guide 26 2. Click PPTP/L2TP as the Internet Access Type. Then click Next to continue. Available settings are explained as follows: Item Description User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. WAN IP Configuratio[...]

Vigor2830 Series User’s Guide 27 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet. S S t t a a t t i i c c I I P P 1. Choose WAN2 as the WAN Interface and click the Next button. The following page will be open for you to spe[...]

Vigor2830 Series User’s Guide 28 Available settings are explained as follows: Item Description WAN IP Type the IP address. Subnet Mask Type the subnet mask. Gateway Type the IP address of gateway. Primary DNS Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to ret[...]

Vigor2830 Series User’s Guide 29 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet.[...]

Vigor2830 Series User’s Guide 30 D D H H C C P P 1. Choose WAN2 as WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. 2. Click DHCP as the Internet Access type. Simply click Next to continue. Available settings are explained as follows: ed as follows: Item Description Host Name Type t[...]

Vigor2830 Series User’s Guide 31 Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. 3. After finished the settings above, click Next for viewing summary of such connection. 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.[...]

Vigor2830 Series User’s Guide 32 2 2 . . 3 3 . . 3 3 F F o o r r W W A A N N 3 3 ( ( U U S S B B ) ) To use 3G USB modem for networ k connection, please choose WAN3. 1. Choose WAN3 as WAN Interface. 2. Then, click Next for viewing summary of such connection. 3. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system s[...]

Vigor2830 Series User’s Guide 33 2 2 . . 4 4 S S e e r r v v i i c c e e A A c c t t i i v v a a t t i i o o n n W W i i z z a a r r d d Service Activation Wizard can guide you to activate WCF service (Web Content Filter) with a quick and easy way. For the Service Activation Wizard is only available for admin operation, therefore, please type “[...]

Vigor2830 Series User’s Guide 34 3. In the following page, you can activate the We b content filter services at the same time or individually. When you finish the selection, please click Next . Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek&ap[...]

Vigor2830 Series User’s Guide 35 Note: The service will be activated and applied as the default rule configured in Firewall>>General Setup . 6. Now, the web page will display the service th at you have activated according to your selection(s). The valid time for the free trial of these services is one month. Later, if you need to extend the[...]

Vigor2830 Series User’s Guide 36 2 2 . . 5 5 O O n n l l i i n n e e S S t t a a t t u u s s 2 2 . . 5 5 . . 1 1 P P h h y y s s i i c c a a l l C C o o n n n n e e c c t t i i o o n n Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. If you select PPPoE as the pro[...]

Vigor2830 Series User’s Guide 37 Item Description Status not enabled. Yes in green means such interface is enabled. Line – Displays the physical connection (VDSL, ADSL, Ethernet, or USB) of this interface. Name – Display the name of the router. Mode - Displays the type of WAN connection (e.g., PPPoE). Up Time - Displays the total uptime of th[...]

Vigor2830 Series User’s Guide 38 2 2 . . 6 6 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your setti[...]

Vigor2830 Series User’s Guide 39 3 A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login . If not, please refer to section 4.12 Creating an Account for MyVigor . 4 The following page will be displayed after you logging in MyVigor. From this page, please click Add or Product Reg[...]

Vigor2830 Series User’s Guide 40 5 When the following page appears, please t ype in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click o n the box of Registration Date). After adding the basic information for the router, please click Submit . 6 When the following page appears, your [...]

Vigor2830 Series User’s Guide 41 A A d d v v a a n n c c e e d d C C o o n n f f i i g g u u r r a a t t i i o o n n This chapter will guide users to ex ecute advanced web configuration. 1. Open a web browser on your PC and type http://192. 168.1.1. The window will ask for typing username and password. 2. Please type “admin/admin” on Username[...]

Vigor2830 Series User’s Guide 42 As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts. Mea[...]

Vigor2830 Series User’s Guide 43 3 3 . . 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This section will introduce some ge neral settings of Internet a nd explain the connection modes for WAN1, WAN2 and WAN3 in details. This router supports multiple-WAN function. It allows users to access Internet and com bine the bandwidth of the m[...]

Vigor2830 Series User’s Guide 44 Active Mode Display whether such WAN interface is Active device or backup device. Backup WAN Display the Backup WAN interface for such WAN when it is disabled. Note: In default, each WAN port is enabled. W W A A N N 1 1 w w i i t t h h A A D D S S L L WAN1 is fixed with physical mode of ADSL. Detailed explanation [...]

Vigor2830 Series User’s Guide 45 VLAN Tag insertion Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the WAN while sending them out. Please type the tag value and specify the priority for the packets sending by WAN1. Disable – Disable the function of VLAN with tag. Tag value – Type th[...]

Vigor2830 Series User’s Guide 46 W W A A N N 2 2 w w i i t t h h E E t t h h e e r r n n e e t t WAN2 is fixed with physical mode of Ethernet. Detailed explanation is shown below: Item Description Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface. Display Name Type the descri[...]

Vigor2830 Series User’s Guide 47 VLAN Tag insertion Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the WAN while sending them out. Please type the tag value and specify the priority for the packets sending by WAN1. Disable – Disable the function of VLAN with tag. Tag value – Type th[...]

Vigor2830 Series User’s Guide 48 W W A A N N 3 3 w w i i t t h h U U S S B B To use 3G network connection through 3G USB Modem , please configure WAN3 interface. Detailed explanation is shown below: Item Description Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface. Display N[...]

Vigor2830 Series User’s Guide 49 Backup WAN If you choose Backup as the Active Mode , Backup WAN will be changed into Backup Type . You have to specify which role the WAN interface should play if you want to backup multiple WANs. However, ignore this setting if you want to backup a single WAN. When any of selected WAN disconnect – Such backup W[...]

Vigor2830 Series User’s Guide 50 Detailed explanation is shown below: Item Description Index Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3 that entered in general setup. Physical Mode It shows the physical connection for WAN1(ADSL)/WAN2 (Ethernet) /WAN3 (3G USB Modem) according to the real network connection. Acc[...]

Vigor2830 Series User’s Guide 51 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E / / P P P P P P o o A A i i n n W W A A N N 1 1 To choose PPPoE /PPPoA as the accessing pr otocol of the Internet, please select PPPoE/PPPoA from the WAN> > Internet Access >>WAN1 page. The following web page will be shown. Det[...]

Vigor2830 Series User’s Guide 52 protocol, then it is not necessary for you to change any settings in this group. Modulation –Default setting is Multimode. Choose the one that fits the requirement of your router. PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection directly from loc[...]

Vigor2830 Series User’s Guide 53 PPP Authentication – Select PAP only or PAP or CHAP for PPP. If you want to connect to Internet all the time, you can check Always On . Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action. IP Address Assignment Method (IPCP) Usually ISP dynamically as[...]

Vigor2830 Series User’s Guide 54 D D e e t t a a i i l l s s P P a a g g e e f f o o r r M M P P o o A A i i n n W W A A N N 1 1 MPoA is a specification that enables ATM ser vices to be integrated with existing LANs, which use either Ethernet, token-ring or TCP/ IP protocols. The goal of MPoA is to allow different LANs to send packets to each oth[...]

Vigor2830 Series User’s Guide 55 that fits the requirement of your router. WAN Connection Detection Such function allows you to verify whether network connection is alive or not through ARP De tect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Detect as detect[...]

Vigor2830 Series User’s Guide 56 Obtain an IP address automatically – Click this button to obtain the IP address automatically. Router Name – Type in the router name provided by ISP. Domain Name – Type in the domain name that you have assigned. Specify an IP address – Click this radio button to specify some data. IP Address – Type in th[...]

Vigor2830 Series User’s Guide 57 ISP Access Setup Enter your allocated username , password and authentication parameters according to the in formation provided by your ISP. Username – Type in the valid user name (maximum 63 characters) provided by the ISP in this field. Password – Type in the password provided by ISP in this field. Index (1-1[...]

Vigor2830 Series User’s Guide 58 Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address . Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address f or the router man[...]

Vigor2830 Series User’s Guide 59 Detailed explanation is shown below: Item Description Enable / Disable Click Enable for activating this function. If you click Disable , this function will be closed and all the settings that you adjusted in this page will be invalid. Keep WAN Connection Normally, this function is designed for Dynamic IP environme[...]

Vigor2830 Series User’s Guide 60 RIP(RFC1058) specifying how routers exchange routing tables information. Click Enable RIP for activating this function. WAN IP Network Settings This group allows you to obtain an IP address automatically and allows you type in IP address manually. WAN IP Alias - If you have multiple public IP addresses and would l[...]

Vigor2830 Series User’s Guide 61 Detailed explanation is shown below: Item Description PPTP/L2TP Enable PPTP- Click this radio button to enable a PPTP client to establish a tunnel to a DSL modem on the WAN interface. Enable L2TP - Click this radio button to enable a L2TP client to establish a tunnel to a DSL modem on the WAN interface. Disable ?[...]

Vigor2830 Series User’s Guide 62 other than the current one you are using. Fixed IP - Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field.[...]

Vigor2830 Series User’s Guide 63 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P i i n n W W A A N N 3 3 To use PPP (for 3G USB Modem) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPP mode for WAN2. The following web page will be shown. Detailed explanation is shown below[...]

Vigor2830 Series User’s Guide 64 PPP Username - Type the PPP username (optional). PPP Password - Type the PPP password (optional). PPP Authentication - Select PAP only or PAP or CHAP for PPP. Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >>[...]

Vigor2830 Series User’s Guide 65 you enabled here will be shown in the Multi-PVC channel drop down list on the web page of Internet Access . Though you can enable eight channels in this page, yet onl y one channel can be chosen on the web page of Internet Access . VPI Type in the value provided by your ISP. VCI Type in the value provided by your [...]

Vigor2830 Series User’s Guide 66 Available settings are explained as follows: Item Description WAN for Router-borne Application Choose the router service for channel 5, 6 or 7. Management - It can be specified for general management (Web configuration/telnet/TR069). If you choose Management, the configuration for this PV C will be effective for W[...]

Vigor2830 Series User’s Guide 67 A A T T M M Q Q o o S S Such configuration is applied to upstream packet s. Such inform ation will be provided by ISP. Please contact with your ISP for detailed information. Available settings are explained as follows: Item Description QoS Type Select a proper QoS type for the channel according to the information [...]

Vigor2830 Series User’s Guide 68 P P o o r r t t - - b b a a s s e e d d B B r r i i d d g g e e General page lets you set the first PVC. As to set the second PVC line, please click the Port-based Bridge tab to open Bridge configuration page. Available settings are explained as follows: Item Description Enable Check this box to enable that channe[...]

Vigor2830 Series User’s Guide 69 3 3 . . 1 1 . . 5 5 L L o o a a d d - - B B a a l l a a n n c c e e P P o o l l i i c c y y This router supports the function of load balanci ng. It can assign traffic with protocol type, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN1, WAN2, and WAN3 interface. The user can[...]

Vigor2830 Series User’s Guide 70 Click Index 1 to access into the following page for configuring load-balance policy. Available settings are explained as follows: Item Description Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Binding WAN interface Choose the WAN int[...]

Vigor2830 Series User’s Guide 71 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what type of public IP addresses coming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router is [...]

Vigor2830 Series User’s Guide 72 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the r[...]

Vigor2830 Series User’s Guide 73 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . There are four subnets provided by the router wh ich allow users to divide groups into d ifferent subnets (LAN1 – LAN4). In a[...]

Vigor2830 Series User’s Guide 74 D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 1 1 Available settings are explained as follows: Item Description IP Address T ype in private IP address for connecting to a local private network (Default: 192.168.1.1). Subnet Mask T ype in an address code that determines the size of the network[...]

Vigor2830 Series User’s Guide 75 the DHCP server to start with when issuing IP addresses. If the 1st IP address of your rout er is 192.168.1.1, the starting IP address must be 192.168.1.2 or greater , but smaller than 192.168.1.25 4. IP Pool Counts - En ter the max imu m nu mbe r of PCs th at you want the DHCP server to assign IP addresses to. Th[...]

Vigor2830 Series User’s Guide 76 D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 2 2 / / L L A A N N 3 3 / / L L A A N N 4 4 Available settings are explained as follows: Item Description Network Configuration Enable/Disable - Click Enable to enable such configuration. Click Disable to disable such configuration. For NAT Usage [...]

Vigor2830 Series User’s Guide 77 default is 50 and the maxim um is 253. Gateway IP Addr ess - Enter a value of the gateway IP address for the DHCP server . The value is usually as same as the 1st IP address of the router , which means the router is the default gateway . D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P R R o o u u t[...]

Vigor2830 Series User’s Guide 78 If you want to use another DHCP server in the network other than the V igor Router ’ s, you can let Relay Agent help you to redirect the DHCP request to the specified location. S tart IP Address - Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 1st IP addr[...]

Vigor2830 Series User’s Guide 79 Item Description Set to Factory Default Click it to return to factory default settings. Viewing Routing Table Displays the routing table for your reference. Index The number (1 to 10) unde r Index allows you to open next page to set up static route. Destination Address Displays the destination address of the stati[...]

Vigor2830 Series User’s Guide 80 1. Go to LAN page and click General Setup , select 1st Subnet as the RIP Protocol Control. Then click the OK button. Note: There are two reasons that we have to appl y RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet[...]

Vigor2830 Series User’s Guide 81 4. Go to Diagnostics and choose Routing T able to verify current routing table.[...]

Vigor2830 Series User’s Guide 82 3 3 . . 2 2 . . 4 4 V V L L A A N N ( ( M M u u l l t t i i - - S S u u b b n n e e t t ) ) Virtual LAN function provides you a very convenient way to manage hosts by g rouping them based on the physical port. Go to LAN page and select VLAN . The following page will appear. Click Enable to invoke VLAN function. Th[...]

Vigor2830 Series User’s Guide 83 Subnet Choose one of them to make the selected VLAN mapping to the specified subnet only . For example, LAN1 is specified for VLAN0. It means that PCs grouped unde r VLAN0 can get the IP address(es) that specified by the subnet. VLAN Tag Enable – Check it to enable the function of VLAN with tag. The router will [...]

Vigor2830 Series User’s Guide 84 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthening co ntrol in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC addre[...]

Vigor2830 Series User’s Guide 85 Refresh Refresh the ARP table listed below to obtain the newest ARP table information. IP Bind List It displays a list for the IP bind to MAC information. Add and Edit IP Address – Type the IP address that will be used for the specified MAC address. Mac Address – Type the MAC address that is used to bind with [...]

Vigor2830 Series User’s Guide 86 Item Description Port Mirror Check Enable to activate this function. Or, check Disable to close this function. Mirror Port Select a port to view traffic sent from mirrored ports. Mirrored port Select which ports are necessary to be mirrored. After finishing all the settings here, please click OK to save the config[...]

Vigor2830 Series User’s Guide 87 3 3 . . 3 3 . . 1 1 P P o o r r t t R R e e d d i i r r e e c c t t i i o o n n Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc. Most of the case, you need a public IP address for each server and this public IP addre[...]

Vigor2830 Series User’s Guide 88 Available settings are explained as follows: Item Description Enable Check this box to enable such port redirection setting. Mode Two options (Single and Range) are provided here for you to choose. To set a range for the specific service, select Range . In Range mode, if the public port (start port and end port) a[...]

Vigor2830 Series User’s Guide 89 Note that the router has its own built-in servi ces (servers) such as T elnet, HTTP and FTP etc. Since the common port numbers of these services (servers) are all the sa me, you may need to reset the router in order to avoid confliction. For example, the built-in web configurator in the router is with default port[...]

Vigor2830 Series User’s Guide 90 The security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: DMZ Host for WAN2 and WAN3 is slightly different with WAN1. Active True IP selection is available for WAN1 only. See the f[...]

Vigor2830 Series User’s Guide 91 If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN2 interface , you will find them in Aux. WAN IP for your selection. Available settings are explained as follows: Item Description Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ hos[...]

Vigor2830 Series User’s Guide 92 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application [...]

Vigor2830 Series User’s Guide 93 Available settings are explained as follows: Item Description Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN IP Specify the WAN IP address that will be used for this entry. This setting is available when WAN IP Alias is configured. Local Computer [...]

Vigor2830 Series User’s Guide 94 Available settings are explained as follows: Item Description Protocol Display the protocol used for this address mapping. Public IP Display the public IP address se lected for this entry, e.g., 172.16.3.102. Private IP Display the private IP set for this address mapping, e.g., 192.168.1.10. Mask Display the subne[...]

Vigor2830 Series User’s Guide 95 WAN Interface Choose the WAN interface for such address mapping profile. WAN IP Select an IP address (the selections provided here are set in IP Alias List of Network >>WAN interface). Local host can use this IP to connect to Internet. If you want to choose any one of the Public IP settings, you must specify[...]

Vigor2830 Series User’s Guide 96 Triggering Port Display the port of the triggering packets. Incoming Protocol Display the protocol for the incoming data of such triggering profile. Incoming Port Display the port for the incoming data of such triggering profile. Status Display if the rule is active or de-active. Click the index number link to ope[...]

Vigor2830 Series User’s Guide 97 Triggering Port Type the port or port range for such trigger profile. Incoming Protocol When the triggering packets received, it is expected the incoming packets will use the selected protocol. Select the protocol (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. Incoming Port Type the port o[...]

Vigor2830 Series User’s Guide 98 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor[...]

Vigor2830 Series User’s Guide 99 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a packet based on the information in its header, stateful inspect[...]

Vigor2830 Series User’s Guide 100 3 3 . . 4 4 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p General Setup allows you to adjust setti ngs of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter . Under some circumstance, your filter set can be linked to work in a serial manner. So here you assign th[...]

Vigor2830 Series User’s Guide 101 will be filtered by firewall settings configured by Vigor router if such feature is enabled. If the firewall system does not have any response (pass or block) for these packets, such as no response coming from web content filter, then the router’s firewall will block the packets directly. D D e e f f a a u u l [...]

Vigor2830 Series User’s Guide 102 Load-Balance Policy Choose the W AN interface for applying Load-Balance Policy . User Management Such item is available only when Rule-Based is selected in User Management>>General Setup . The general firewall rule will be applied to the user/user group/all users specified here. Note: When there is no user [...]

Vigor2830 Series User’s Guide 103 CSM>> W eb Content Filter web page first. Or choose [Cr eate New] from the drop down list in this page to c reate a new profile. For troubleshooting needs, you can specify to record information for W eb Content Filter by checking the Log box. It will be sent to Syslog server . Please refer to section Syslog[...]

Vigor2830 Series User’s Guide 104 3 3 . . 4 4 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule num ber button to [...]

Vigor2830 Series User’s Guide 105 To edit Filter Rule , click the Filter Rule index button to enter the Filter Rule setup page. Available settings are explained as follows: Item Description Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long[...]

Vigor2830 Series User’s Guide 106 LAN. Source/Destination IP Click Edit to access into the follo wing dialog to choose the source/destination IP or IP ranges. To set the IP address manually, please choose Any Address/Single Address/ Range Address/Subnet Address as the Address Type and type them in this dialog. In addition, if you want to use the [...]

Vigor2830 Series User’s Guide 107 Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port – (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this service type. (!=) ?[...]

Vigor2830 Series User’s Guide 108 MAC Bind IP Strict – Make the MAC address and IP address settings configured in IP Object for Source IP and Destination IP be bound for applying such filter rule. No-Strict - no limitation. Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, pl[...]

Vigor2830 Series User’s Guide 109 W eb Content Filter Select one of the W eb Content Filter profile settings (created in CSM>> W eb Content Filter ) for applying with this router . Please set at lea st one profile for anti-virus in CSM>> W eb Content Filter web page first. Or choose [Cr eate New] from the drop down list in this page t[...]

Vigor2830 Series User’s Guide 110 Window size – It determines the size of TCP protocol (0~65535). T he more the value is, the better the performance will be. However , if the network is not stable, small value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources. However , Queue tim[...]

Vigor2830 Series User’s Guide 111[...]

Vigor2830 Series User’s Guide 112 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Available settings[...]

Vigor2830 Series User’s Guide 113 Enable ICMP flood defense Check the box to activate the ICMP flood defense function. Similar to the UDP flood defense function, once if the Threshold of ICMP packets fro m Internet has exceeded the defined value, the router will discard the ICMP echo requests coming from the Internet. The default setting for thre[...]

Vigor2830 Series User’s Guide 114 Many machines may crash when receiving ICMP datagra ms (packets) that exceed the maximum length. To avoid this type of attack, the Vigor router is designed to be capable of discarding any fragmented ICMP packets with a length greater than 1024 octets. Block Ping of Death Check the box to activate the Block Ping o[...]

Vigor2830 Series User’s Guide 115 3 3 . . 5 5 U U s s e e r r M M a a n n a a g g e e m m e e n n t t User Management is a security feature which disallows any IP traffic (except DHCP-related packets) from a particular host until that host has correctly supplied a valid username and password. Instead of managing with IP a ddress/MAC address, User[...]

Vigor2830 Series User’s Guide 116 3 3 . . 5 5 . . 1 1 G G e e n n e e r r a a l l S S e e t t u u p p General Setup can determine the standard (rule -based or user-based) for the users controlled by User Management. The mode (standard) select ed here will influence the contents of the filter rule(s) applied to every user. Available settings are e[...]

Vigor2830 Series User’s Guide 117 3 3 . . 5 5 . . 2 2 U U s s e e r r P P r r o o f f i i l l e e This page allows you to set customized profiles (up to 200) which will be applied for users controlled under User Management . Simply open User Management>>User Profile . To set the user profile, please click any index num ber link to open the [...]

Vigor2830 Series User’s Guide 118 Available settings are explained as follows: Item Description Enable this account Check this box to enable such user profile. User Name Type a name for such user profile (e.g., LAN_User_Group_1, WLAN_User_Group_A, WLAN_User_Group_B, etc). When a user tries to access Internet through this router, an authentication[...]

Vigor2830 Series User’s Guide 119 For the detailed configuration, simply refer to Firewall>>Filter Rule . The firewall filter rules that are not selected in Firewall>>General>>Defa ult rule can be available for use in User Management>>User Profile . External Service Authentication The router will authenticate the dial-in u[...]

Vigor2830 Series User’s Guide 120 window with remaining time of connection for such user will be displayed. Next, the u ser can access Internet through any browser on Windows. Note that Alert Tool can be downloaded from DrayTek web site. Telnet – If it is selected, the user can use Telnet command to perform the authentication job. Landing Page [...]

Vigor2830 Series User’s Guide 121 Available settings are explained as follows: Item Description Name Type a name for this user group. Available User Objects You can gather user profiles (objects) from User Profile page within one user group. All the available user objects that you have created will be shown in this box. Notice that user object, A[...]

Vigor2830 Series User’s Guide 122 Available settings are explained as follows: Item Description Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh this page manually. Index Display the number of the data flow. Active User Dis[...]

Vigor2830 Series User’s Guide 123 3 3 . . 6 6 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/[...]

Vigor2830 Series User’s Guide 124 Click the number under Index co lumn for settings in detail. Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface. For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP[...]

Vigor2830 Series User’s Guide 125 MAC Address Type the MAC address of the network card which will be controlled. Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Subnet Mask Type the subnet mask if the Subnet Address type is selected. Invert Selection[...]

Vigor2830 Series User’s Guide 126 Click the number under Index colu mn for settings in detail. Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or Any to display all the available IP objects with the specified interface. Available IP Objec[...]

Vigor2830 Series User’s Guide 127 3 3 . . 6 6 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Click the number under Index co lumn for set[...]

Vigor2830 Series User’s Guide 128 Protocol Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number. (=) – when the first and last value are the same, it [...]

Vigor2830 Series User’s Guide 129 3 3 . . 6 6 . . 4 4 S S e e r r v v i i c c e e T T y y p p e e G G r r o o u u p p This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detai[...]

Vigor2830 Series User’s Guide 130 Available Service Type Objects All the available service objects that you have added on Objects Setting>>Service Type Object will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box. 3 3 . . 6 6 . . 5 5 K K e e y y w w o o r r d d O O b b j j [...]

Vigor2830 Series User’s Guide 131 Click the number under Index column for setting in detail. Available settings are explained as follows: Item Description Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For example, type gambling as Contents. When you browse the webpage, the page with gambling informati [...]

Vigor2830 Series User’s Guide 132 3 3 . . 6 6 . . 6 6 K K e e y y w w o o r r d d G G r r o o u u p p This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL /Web Content Filter Profile . Available settings are explained as follows: Item Description Se[...]

Vigor2830 Series User’s Guide 133 Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects Click button to add the selected Keyword objects in this box.[...]

Vigor2830 Series User’s Guide 134 3 3 . . 6 6 . . 7 7 F F i i l l e e E E x x t t e e n n s s i i o o n n O O b b j j e e c c t t This page allows you to set eight profiles which will be applied in CSM>>URL Content Filter . All the files with the extension names specified in these profiles will be processed according to the chosen action. A[...]

Vigor2830 Series User’s Guide 135 Item Description Profile Name Type a name for this profile. Type a name for such profile and check all the ite ms of file extension that will be processed in the router. Finally, click OK to save this profile. 3 3 . . 7 7 C C S S M M P P r r o o f f i i l l e e C C o o n n t t e e n n t t S S e e c c u u r r i i [...]

Vigor2830 Series User’s Guide 136 Vigor router will then decide whether to allow access to this site according to the categories you have selected. Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced datab ase servers can handle millions of requests for categorization. Note: The pri[...]

Vigor2830 Series User’s Guide 137 Below shows the items which are categorized under Protocol . Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. Select All Click it to choose all of the items in this page. Clear All Uncheck all the selected boxes. The profiles configured here can be applie[...]

Vigor2830 Series User’s Guide 138 The items categorized under P2P ----- The items categorized under Misc -----[...]

Vigor2830 Series User’s Guide 139 3 3 . . 7 7 . . 2 2 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the ina ppropriate web sites but also prohibit other web feature wher[...]

Vigor2830 Series User’s Guide 140 Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages that match with the conditions specified in URL Access Control and Web Feature below passin[...]

Vigor2830 Series User’s Guide 141 Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass w ill be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. URL Access Control Enable URL Access Control - Chec[...]

Vigor2830 Series User’s Guide 142 should be noticed that the more sim plified the blocking keyword list is, the more efficiently the Vigor router performs. Web Feature Enable Restrict Web Feature - Check this box to make the keyword being blocked or passed. Action - This setting is available only when Either: URL Access Control First or Either: W[...]

Vigor2830 Series User’s Guide 143 3 3 . . 7 7 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via System Maintenance>>Activation . Service Activation[...]

Vigor2830 Series User’s Guide 144 Setup Query Server It is recommended for you to use the default setting, auto-selected. You need to sp ecify a server for categorize searching when you type URL in browser based on the web content filter profile. Setup Test Server It is recommended for you to use the default setting, auto-selected. Find more Clic[...]

Vigor2830 Series User’s Guide 145 Available settings are explained as follows: Item Description Black/White List Enable – Activate white/black list function for such profile. Group/Object Selections – Click Edit to choose the group or object profile as the content of white/black list. Pass - allow accessing into the corresponding webpage with[...]

Vigor2830 Series User’s Guide 146 Action Pass - allow accessing into the co rresponding webpage with the categories listed on the box below. Block - restrict accessing into the corresponding webpage with the categories listed on the box below. If the web pages do not match with the specified feature set here, it will be processed with reverse act[...]

Vigor2830 Series User’s Guide 147 3 3 . . 8 8 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router. The router will generate the records of NAT sessions for such c onnection. The P2P (Peer to Peer) applications (e.g., BitTorrent) always need many sessions for procession[...]

Vigor2830 Series User’s Guide 148 Specific Limitation Start IP- Defines the start IP address for limit session. End IP - Defines the end IP address for limit session. Maximum Sessions - Defines the available session number for each host in the specific range of IP addresses. If you do not set the session number in this field, the system will use [...]

Vigor2830 Series User’s Guide 149 3 3 . . 8 8 . . 2 2 B B a a n n d d w w i i d d t t h h L L i i m m i i t t The downstream or upstream from FTP, HTTP or so me P2P applications will occupy large of bandwidth and affect the applications for othe r programs. Please use Limit Bandwidth to m ake the bandwidth usage more efficient. In the Bandwidth M[...]

Vigor2830 Series User’s Guide 150 Specific Limitation Start IP - Define the start IP address for limit bandwidth. End IP - Define the end IP address for limit bandwidth. Each /Shared - Select Each to make each IP within the range of Start IP and End IP having the same speed defined in TX limit and RX limit fields; select Shared to make all the IP[...]

Vigor2830 Series User’s Guide 151 3 3 . . 8 8 . . 3 3 Q Q u u a a l l i i t t y y o o f f S S e e r r v v i i c c e e Deploying QoS (Quality of Service) management to guarantee that all applications receive the service levels required and sufficient bandwidth to meet performance expectations is indeed one important aspect of modern enterprise net[...]

Vigor2830 Series User’s Guide 152 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s eff[...]

Vigor2830 Series User’s Guide 153 can be adjusted for your necessity. Yet, the last one is reserved for the packets which are not suitable for the user-defined class rules. Available settings are explained as follows: Item Description Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS [...]

Vigor2830 Series User’s Guide 154 Outbound TCP ACK Prioritize The difference in bandwidth between download and upload are great in ADSL2+ environment. For the download speed might be impacted by the uploading TCP ACK, you can check this box to push ACK of upload faster to speed the network traffic. Limited_bandwidth Ratio The ratio typed here is [...]

Vigor2830 Series User’s Guide 155 E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one. After you click the Edit link, you will see the following page[...]

Vigor2830 Series User’s Guide 156 Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit button to set the remote IP address (on LAN/WAN) for the rule. Edit It allows you to edit source address information. Address Type – Determine the address type for the source address. For Single [...]

Vigor2830 Series User’s Guide 157 By the way, you can set up to 20 rules for one Class. If you want to edit an existed rule, please select the radio button of that one and clic k Edit to open the rule edit page for modification. E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e[...]

Vigor2830 Series User’s Guide 158 For adding a new service type, click Add to open the following pag e. Available settings are explained as follows: Item Description Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP or other) for the new service. Port Configuration Type - Click Single or Range [...]

Vigor2830 Series User’s Guide 159 most popular DDNS service providers such as www.dyndns.org, www.no-ip.com, www.dtdns.com, www.changeip.com, www.dynamic- nameserver.com. You should visit their websites to register your own domain nam e for the router. Enable the Function and Add a Dynamic DNS Account 1. Assume you have a registered domain name f[...]

Vigor2830 Series User’s Guide 160 3. Select Index number 1 to add an account for the router. Check Enable Dynamic DNS Account , and choose correct Service Provider: dyn dns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block. The following two blocks should be typed your account Login Nam e: tes[...]

Vigor2830 Series User’s Guide 161 Wildcard and Backup MX The W ildcard and Backup MX (Mail Exchange) features are not supported for all Dynamic DNS providers. Y ou could get more detailed info rmation from their websites. Mail Extender If the mail server is defined with another name, please type the name in this area. Such mail server will be use[...]

Vigor2830 Series User’s Guide 162 Index Click the number below Index to access into the setting page of schedule. Status Display if this schedule setting is active or inactive. You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule, please click any [...]

Vigor2830 Series User’s Guide 163 Idle Timeout Specify the duration (or period) for the schedule. How often - Specify how often the schedule will be applied Once - The schedule will be applied just once Weekdays - Specify which days in one week should perform the schedule. Example Suppose you want to control the PPPoE Internet acce ss connection [...]

Vigor2830 Series User’s Guide 164 Available settings are explained as follows: Item Description Enable Check to enable RADIUS client feature. Server IP Address Enter the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138. Shared Secret The RADIUS server an[...]

Vigor2830 Series User’s Guide 165 The UPnP facility on the router enables UPnP aware applications such as MSN Messenger to discover what are behind a NA T router . The application will also learn the external IP address and configure port mappings on the rout er . Subse quently , such a facility forwards packets fro m the external ports of the ro[...]

Vigor2830 Series User’s Guide 166 The UPnP function dynamically adds port ma ppings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. 3 3 . . 9 9 . . 5 5 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol . It is a communication protocol which is m[...]

Vigor2830 Series User’s Guide 167 3 3 . . 9 9 . . 6 6 W W a a k k e e o o n n L L A A N N A PC client on LAN can be woken up by the router it connects. When a user wants to wake up a specified PC through the router, he/she must type correct MAC address of the specified PC on this web page of Wake on LAN (WOL) of this router. In addition, such PC [...]

Vigor2830 Series User’s Guide 168 3 3 . . 9 9 . . 7 7 S S h h o o r r t t M M e e s s s s a a g g e e S S e e r r v v i i c c e e The function of Short Message Service is that Vi gor router sends a message to user’s mobile through specified service provider to assist the u ser knowing the real-time abnormal situations. Vigor router allows you t[...]

Vigor2830 Series User’s Guide 169 Available settings are explained as follows: Item Description Enable SMS Setup Click Enable to enable SMS function. Click Disable to close SMS function. Profile Name Type a name for such SMS profile. Service Provider Use the drop down list to specify the service provider which offers SMS service. Username Type a [...]

Vigor2830 Series User’s Guide 170 3 3 . . 1 1 0 0 . . 1 1 V V P P N N C C l l i i e e n n t t W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN client. Such wizard will guide to set the LAN-to-LAN profile for VPN dial out connec tion (from server to client) step by step. 1. Open VPN and Remote Access>>VPN Client [...]

Vigor2830 Series User’s Guide 171 2. When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making the choices for the client profi[...]

Vigor2830 Series User’s Guide 172 z When you choose PPTP (None Encryption) or PPTP (Encryption) , you will see the following graphic: z When you choose IPSec , you will see the following graphic:[...]

Vigor2830 Series User’s Guide 173 z When you choose L2TP , you will see the following graphic: z When you choose L2TP over IPSec (N ice to Have) or L2TP over IPSec (Must), you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited t[...]

Vigor2830 Series User’s Guide 174 VPN Dial-Out Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router will use WAN1 as the first channel for VPN connection. If WAN1 fails, the router will use another WAN interface instead. WAN1 Only - Wh[...]

Vigor2830 Series User’s Guide 175 3. After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Available settings are explained as follows: Item Description Go to the VPN Connec[...]

Vigor2830 Series User’s Guide 176 3 3 . . 1 1 0 0 . . 2 2 V V P P N N S S e e r r v v e e r r W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connec tion (from client to server) step by step. 1. Open VPN and Remote Access>>VPN Server W[...]

Vigor2830 Series User’s Guide 177 Please choose a LAN-to-LAN Profile This item is available when you choose Site to Site VPN (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set. Please choose a Dial-in User Accounts This item is available when you choose Remote Dial-in User (Teleworker) as VPN server mode. There are 32 VPN[...]

Vigor2830 Series User’s Guide 178 z When you check PPTP , you will see the following graphic: z When you check PPTP/IPSec/L2TP (three ty pes) or PPTP/IPSec (two types) or L2TP with Policy (Nice to Have/Must) , you will see the following graphic:[...]

Vigor2830 Series User’s Guide 179 z When you check IPSec , you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. User Name This field is used to authenticate for connection when you select PPTP or L2TP with or[...]

Vigor2830 Series User’s Guide 180 3. After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Available settings are explained as follows: Item Description Go to the VPN Connec[...]

Vigor2830 Series User’s Guide 181 3 3 . . 1 1 0 0 . . 4 4 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VP N connections, such as PPTP, L2TP, L2TP over IPSec. Available settings are explained as follows: Item Description Dial-In PPP Authentication PAP Only - elect this option to force the rou[...]

Vigor2830 Series User’s Guide 182 Mutual Authentication (PAP) The Mutual Authentication function is mainly used to communicate with other routers or clients who need bi-directional authentication in order to provide stronger security, for example, Cisco routers. So you should enable this function when your peer router requires mutual authenticati[...]

Vigor2830 Series User’s Guide 183 Available settings are explained as follows: Item Description IKE Authentication Method This usually applies to those are remote dial-in user or node (LAN-to-LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel. Pre-Shared Key - Currently only suppor t Pre-[...]

Vigor2830 Series User’s Guide 184 3 3 . . 1 1 0 0 . . 6 6 I I P P S S e e c c P P e e e e r r I I d d e e n n t t i i t t y y To use digital certificate for p eer authentication in either LAN-to-LAN connection or Remote User Dial-In connection, here you may edit a table of peer certificate for selectio n. As shown below, the router provides 32 en[...]

Vigor2830 Series User’s Guide 185 Available settings are explained as follows: Item Description Profile Name Type the name of the profile. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field [...]

Vigor2830 Series User’s Guide 186 3 3 . . 1 1 0 0 . . 7 7 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via VPN connecti on. You may set parameters including specified connection peer ID, connection type [...]

Vigor2830 Series User’s Guide 187 Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will gui de you to fill all the necessary fields. Available settings are explained as fol[...]

Vigor2830 Series User’s Guide 188 Allowed Dial-In Type PPTP - Allow the remote dial-in user to make a PPTP VPN connection through the Internet. You should set the U ser Name and Password of remote dial-in user below. IPSec Tunnel - Allow the remote dial-in user to make an IPSec VPN connection through Internet. L2TP with IPSec Policy - Allow the r[...]

Vigor2830 Series User’s Guide 189 mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6). IKE Authentication Method This group of fields is applicable for IPSec Tunnels and L2TP with IPSec Policy when you specify the IP address of the remote node. The only exception is Digital Signature (X.509) can be set when you select IPSec tunnel either with o[...]

Vigor2830 Series User’s Guide 190 The following figure shows the summary table according to the item (All/Trunk) selected for View . The following shows profiles join ed into VPN Backup mechanism. Available settings are explained as follows: Item Description View All – Click it to display the LAN to LAN profiles. Trunk – Click it to display t[...]

Vigor2830 Series User’s Guide 191 Available settings are explained as follows: Item Description Common Settings Profile Name – Specify a name for the profile of the LAN-to-LAN connection. Enable this profile - Check here to activate this profile. VPN Dial-Out Through - Use the drop down menu to choose a proper WAN interface for this profile. Th[...]

Vigor2830 Series User’s Guide 192 z WAN1 /WAN2 /WAN3 First - While connecting, the router will use WAN1 /WAN2 /WAN3 as the first channel for VPN connection. If WAN1 fails, the router will use another WAN interface instead. WAN1 /WAN2 /WAN3 Only - While connecting, the router will use WAN1 /WAN2 /WAN3 as the only channel for VPN connection. Netbio[...]

Vigor2830 Series User’s Guide 193 Dial-Out Settings Type of Server I am calling - PPTP - Build a PPTP VPN connection to the server through the Internet. You should set the identity like User Name and Password below for the authentication of remote server. IPSec Tunnel - Build an IPSec VPN connection to the server through Internet. L2TP with IPSec[...]

Vigor2830 Series User’s Guide 194 IPSec Security Method - This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy. z Medium AH (Authentication Header) means data will be authenticated, but not be encrypted. By default, this option is active. z High (ESP-Encapsulating Security Payload)- means payload (data) will be encrypted an[...]

Vigor2830 Series User’s Guide 195 that covers the most algorithms. z IKE phase 1 key lifetime- For security reason, the lifetime of key should be defined. The d efault value is 28800 seconds. You may specify a value in between 900 and 86400 seconds. z IKE phase 2 key lifetime- For security reason, the lifetime of key should be defined. The d efau[...]

Vigor2830 Series User’s Guide 196 and Password of remote dial-in user below. IPSec Tunnel- Allow the remote dial-in user to trigger an IPSec VPN connection through Internet. L2TP with IPSec Policy - Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: [...]

Vigor2830 Series User’s Guide 197 Certificate Management>>Local Certificate ) will be inspected first. IPSec Security Method - This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy when you specify the remote node. Medium- Authentication Header (AH) means data will be authenticated, but not be encrypte d. By default, t[...]

Vigor2830 Series User’s Guide 198 Network Mask through the VPN connection. More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. RIP Direction - The option specifies the[...]

Vigor2830 Series User’s Guide 199 3 3 . . 1 1 0 0 . . 9 9 V V P P N N T T R R U U N N K K M M a a n n a a g g e e m m e e n n t t VPN trunk includes some features - VPN Backup, GRE over IPSec, and Binding tunnel policy. F F e e a a t t u u r r e e s s o o f f V V P P N N T T R R U U N N K K – – V V P P N N B B a a c c k k u u p p M M e e c c [...]

Vigor2830 Series User’s Guide 200 Available settings are explained as follows: Item Description Backup Profile List Set to Factory Default - Click to clear all VPN TRUNK-VPN Backup mechanism profile. No – The order of VPN TRUNK-VPN Backup mechanism profile. Status - “v” means such profile is enabled; “x” means such profile is disabled. [...]

Vigor2830 Series User’s Guide 201 Detailed information for this dialog, see later section - Advanced Backup . General Setup Status - After choosing one of the profi le listed above, please click Enable to activate this profile. If you click Disable , the selected or current used VPN TRUNK-Backup/Load Balance mechanism profile will not have any ef[...]

Vigor2830 Series User’s Guide 202 H H o o w w c c a a n n y y o o u u s s e e t t a a V V P P N N T T R R U U N N K K - - V V P P N N B B a a c c k k u u p p m m e e c c h h a a n n i i s s m m p p r r o o f f i i l l e e ? ? 1. First of all, go to VPN and Remote Access>>LAN- to-LAN . Set two or more LAN-to-LAN profiles first that will be u[...]

Vigor2830 Series User’s Guide 203 3. Later, on peer side (as VPN Client): please type 192.168.50.100 in the field of My GRE IP and type IP address of the server (192. 168.50.200) in the field of Peer GRE IP. A A d d v v a a n n c c e e d d B B a a c c k k u u p p After setting profiles for backup, you can choose any one of them and click Advance [...]

Vigor2830 Series User’s Guide 204 3 3 . . 1 1 0 0 . . 1 1 0 0 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You m ay also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Ava[...]

Vigor2830 Series User’s Guide 205 3 3 . . 1 1 1 1 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name , a serial number, expiration dates etc., and the digital signature of t[...]

Vigor2830 Series User’s Guide 206 Type in all the information that the window requests. Then click Generate again. Import Click this button to import a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After [...]

Vigor2830 Series User’s Guide 207 3 3 . . 1 1 1 1 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. [...]

Vigor2830 Series User’s Guide 208 3 3 . . 1 1 1 1 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please typ[...]

Vigor2830 Series User’s Guide 209 z Calling via SIP Servers First, the Vigor V models of yours will have to register to a SIP Registrar by sending registration messages to validate. Then, bo th parties’ SIP proxies will forward the sequence of messages to caller to establish the session . If you both register to the same SIP Registrar, then it [...]

Vigor2830 Series User’s Guide 210 3 3 . . 1 1 2 2 . . 1 1 D D i i a a l l P P l l a a n n This page allows you to set phone book and digit map for the VoIP function. Click the Phone Book and Digit Map links on the page to access into next pages for dialplan settings. Available settings are explained as follows: Item Description Enable Secure Phon[...]

Vigor2830 Series User’s Guide 211 P P h h o o n n e e B B o o o o k k In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make calls quickly and easily by using “speed-dial” Phone Number . There are total 60 index entries in the phonebook for you to store all your friends and fam ily members’ SIP addre[...]

Vigor2830 Series User’s Guide 212 Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots of SIP URL Address. SIP URL Enter your friend’s SIP Address. Dial Out Account Choose one of the SIP accounts for this profile to dial out. It is useful[...]

Vigor2830 Series User’s Guide 213 D D i i g g i i t t M M a a p p For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface. Available settings are explained as follow[...]

Vigor2830 Series User’s Guide 214 OP Number The front number you type here is the first part of the account number that you want to execute special function (according to the chosen mode) by using the prefix number. Min Len Set the minimal length of the dial number for appl ying the prefix number settings. Take the above picture (Prefix Table Set[...]

Vigor2830 Series User’s Guide 215 Available settings are explained as follows: Item Description Enable Check it to enable this entry. Call Direction Determine the direction for th e phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/UR[...]

Vigor2830 Series User’s Guide 216 For Block Unknown Domain – this function can block incomi ng calls (through Phone port) from unrecognized domain that is not specified in SIP accounts. Such control also can be done based on preconfigured schedules. For Block IP Address – this function can block incoming calls (through Phone port) com ing fro[...]

Vigor2830 Series User’s Guide 217 R R e e g g i i o o n n a a l l This page allows you to process incoming or out going phone calls by regional. Default values (common used in most areas) will be shown on this web page. You can change the number based on the region that the router is placed. Available settings are explained as follows: Item Descr[...]

Vigor2830 Series User’s Guide 218 Do Not Disturb [Act] Dial the number typed in this field to invoke the function of DND. Do Not Distrub [Deact] Dial the number typed in this field to release the DND function. Hide caller ID [Act] Dial the number typed in this field to make your phone number (ID) not displayed on the display panel of re mote end.[...]

Vigor2830 Series User’s Guide 219 3 3 . . 1 1 2 2 . . 2 2 S S I I P P A A c c c c o o u u n n t t s s In this section, you set up your own SIP setti ngs. When you apply for an account, your SIP service provider will give you an Account Name or user name, SIP Registrar, Proxy, and Domain name . (The last three might be the same in some case). Then[...]

Vigor2830 Series User’s Guide 220 Codec Display the codec type for the account. Ring Port Specify which port will ring when receiving a phone call. Set Phone, ISDN1-S0 or ISDN-TE as the default ring port for the SIP account. If you choose Phone or ISDN1-S0, the ISDN2-TE selection will be dimmed, vice versa. There are ten internal lines with numbe[...]

Vigor2830 Series User’s Guide 221 Item Description Profile Name Assign a name for this profile for identifying. You can type similar name with the domain. For example, if the domain name is draytel.org , then you m ight set draytel-1 in this field. Register via If you want to make VoIP call without register personal information, please choose Non[...]

Vigor2830 Series User’s Guide 222 your necessity. None – Disable this function. Stun – Choose this option if there is Stun server provid ed for your router. Manual – Choose this option if you wan t to specify an external IP address as the NAT transversal support. Nortel – If the soft-switch that you use supports Nortel solution, you can c[...]

Vigor2830 Series User’s Guide 223 Single Codec – If the box is checked, only the selected Codec will be applied. Packet Size The amount of data contained in a single packet. The default value is 20 ms, which means the data packet will contain 20 ms voice information. Voice Active Detector This function can detect if the voice on both sides is a[...]

Vigor2830 Series User’s Guide 224 configure. Phone1/Phone2 allows you to set general settings for PSTN phones. Call Feature – A brief description for call feature will be shown in this field for your reference. Tone - Display the tone settings that configured in the advanced settings page of Phone Index. Gain - Display the volume gain settings [...]

Vigor2830 Series User’s Guide 225 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r P P h h o o n n e e P P o o r r t t Click the number link for Phone port, you can access into t he following page for configuring Phone settings. Available settings are explained as follows: Item Description Hotline Check the box to enabl[...]

Vigor2830 Series User’s Guide 226 Call Waiting Check this box to invoke this function. A notice sound will appear to tell the user new phone call is waiting for your response. Click hook flash to pick up the waiting phone call. Call Transfer Check this box to invoke this function. C lick hook flash to initiate another phone call. Wh en the phone [...]

Vigor2830 Series User’s Guide 227 one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, bus y tone, congestion tone by yourself for VoIP phone. Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/[...]

Vigor2830 Series User’s Guide 228 z InBand - Choose this one then the Vigor will send the DTMF tone as audio directly when you press the keypad on the phone. z OutBand - Choose this one then the Vigor will capture the keypad number you pressed and transform it to digital form then send to the other side; the receiver will generate the tone accord[...]

Vigor2830 Series User’s Guide 229 Port It shows current connection status for Phone(s) and ISDN ports. Status It shows the VoIP connection status. IDLE - Indicates that the VoIP function is idle. HANG_UP - Indicates that the connection is not established (busy tone). CONNECTING - Indicates that the user is calling out. WAIT_ANS - Indicates that a[...]

Vigor2830 Series User’s Guide 230 mobility so WLAN users can simultaneously access all LAN facil ities just like on a wired LAN as well as Internet access. The Vigor wireless routers are equipped with a wireless LAN interface compliant with the standard IEEE 802.11n draft 2 prot ocol . To boost its performance further, the Vigor Router is also lo[...]

Vigor2830 Series User’s Guide 231 In WPA-Personal, a pre-defined key is used for encryption during data transmission. WPA applies Temporal Key Integrity Protocol (TKIP) for data encryption while WPA2 applies AES. The WPA-Enterprise combines not only encry ption but also authentication. Since WEP has been proved vulnerable, you may consider using [...]

Vigor2830 Series User’s Guide 232 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Available settings are explained as follows: Item Descript[...]

Vigor2830 Series User’s Guide 233 or In which, 802.11b/g operates on 2.4G ba nd, 802.11a operates on 5G band, and 802.11n oper ates on either 2.4G or 5G band. Index(1-15) Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The def[...]

Vigor2830 Series User’s Guide 234 Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync field instead of long pream ble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Check it to use Long P[...]

Vigor2830 Series User’s Guide 235 Rate Control It controls the data transmission rate through wireless connection. Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download. Default value is 30,000 kbps. 3 3 . . 1 1 3 3 . . 3 3 S S e e c c u u r [...]

Vigor2830 Series User’s Guide 236 Available settings are explained as follows: Item Description Mode There are several modes provided for you to choose. Note: You should also set RADIUS Server simultaneously if 802.1x mode is selected. Disable - Turn off the encryption mechanism. WEP- Accepts only WEP clients and the encryption key should be ente[...]

Vigor2830 Series User’s Guide 237 WPA/802.1x Only- Accepts only WPA clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. WPA2/802.1x Only- Accepts only WPA2 clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. Mixed (WPA+WPA2/802.1x only) - Accepts WPA and WPA2 [...]

Vigor2830 Series User’s Guide 238 3 3 . . 1 1 3 3 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l In the Access Control , the router may restrict wireless access to cert ain wireless clients only by locking their MAC address into a black or wh ite list. The user may block wireless clients by inserting their MAC addresses into a black [...]

Vigor2830 Series User’s Guide 239 Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Cancel Give up the access control set up. OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 3 3 . . 1 1 3 3 . . 5 5 W W P P S S WPS (Wi-Fi Protected Setup) provides e[...]

Vigor2830 Series User’s Guide 240 z If you want to use PIN code, you have to know the PIN code specified in wireless client. Then provide the PIN code of the wireless clie nt you wish to connect to the vigor router. For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>>Security , you will see the [...]

Vigor2830 Series User’s Guide 241 Below shows Wireless LAN>>WPS web page. Available settings are explained as follows: Item Description Enable WPS Check this box to enable WPS setting. WPS Status Display related system information for WPS. If the wireless security (encryption) function of the router is properly configured, you can see ‘Co[...]

Vigor2830 Series User’s Guide 242 3 3 . . 1 1 3 3 . . 6 6 W W D D S S WDS means Wireless Distribution System. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge traffic between two LANs through the air. y Extend the coverage range of a WLAN. To meet the above [...]

Vigor2830 Series User’s Guide 243 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Available [...]

Vigor2830 Series User’s Guide 244 invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Security There are three types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of[...]

Vigor2830 Series User’s Guide 245 3 3 . . 1 1 3 3 . . 7 7 A A d d v v a a n n c c e e d d S S e e t t t t i i n n g g This page allows users to set advanced se ttings such as operation mode, channel bandwidth, guard interval, and aggregation MSDU for wireless data transmission. Available settings are explained as follows: Item Description Operati[...]

Vigor2830 Series User’s Guide 246 3 3 . . 1 1 3 3 . . 8 8 W W M M M M C C o o n n f f i i g g u u r r a a t t i i o o n n WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access categories derived from 802.1d (prioritization tabs). T he categories are designed with specific types of traffic, voice, video, best e[...]

Vigor2830 Series User’s Guide 247 categories must be smaller; however, the difference between AC_BE and AC_BK categories must be greater. Txop It means transmission opportunity. For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission, please set greater value for them to get highest transmission opportunity. Specify[...]

Vigor2830 Series User’s Guide 248 Available settings are explained as follows: Item Description Scan It is used to discover all the connected AP. The results will be shown on the box above this button. Statistics It displays the statistics for the channels used by APs. Add to If you want the found AP applying the WDS settings, please type in the [...]

Vigor2830 Series User’s Guide 249 3 3 . . 1 1 3 3 . . 1 1 0 0 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of connecting wire less clients now along with its status code. There is a code summary belo w for explanation. For convenient Access C ontrol , you can select a WLAN station and click Add to Access Control[...]

Vigor2830 Series User’s Guide 250 3 3 . . 1 1 3 3 . . 1 1 1 1 W W e e b b P P o o r r t t a a l l This page allows you to specify an URL fo r accessing into or display a message when a wireless user connects to Internet through th is router. No matter what the purpose of the wireless client is, he/she will be forced in to the URL configured here [...]

Vigor2830 Series User’s Guide 251 3 3 . . 1 1 4 4 U U S S B B A A p p p p l l i i c c a a t t i i o o n n USB storage disk connected on Vigor router can be regarded as a server. By way of Vigor router, clients on LAN can access, write and read data stored in USB storage disk with different applications. After setting the configuration in USB Appl[...]

Vigor2830 Series User’s Guide 252 types of character sets. Default Charset is for English based file name. Samba Service Settings Click Enable to invoke samba service via the router. Access Mode LAN Only – Users coming from internet cannot connect to the samba server of the router. LAN And WAN - Both LAN and WAN users can access samba server of[...]

Vigor2830 Series User’s Guide 253 Available settings are explained as follows: Item Description FTP/Samba User Enable – Click this button to activate this profile (account) for FTP service or Samba User service. Later, the user can use the username specified in this page to login into FTP server. Disable – Click this button to disable such pr[...]

Vigor2830 Series User’s Guide 254 new folder which can be specified as the Home Folder. Access Rule It determines the authority for such profile. Any user, who uses such profile for accessing into USB storage disk, must follow the rule specified here. File – Check the items (Read, Write and Delete) for such profile. Directory –Check the items[...]

Vigor2830 Series User’s Guide 255 3 3 . . 1 1 4 4 . . 3 3 F F i i l l e e E E x x p p l l o o r r e e r r File Explorer offers an easy way for users to view and manage the content of USB storage disk connected on Vigor router. Available settings are explained as follows: Item Description Refresh Click this icon to refresh files list. Back Click t[...]

Vigor2830 Series User’s Guide 256 Item Description Connection Status If there is no USB storage disk connected to Vigor router, “ No Disk Connected ” will be shown here. Disk Capacity It displays the total capacity of the USB storage disk. Free Capacity It displays the free space of the USB storage disk. Click Refresh at any time to get new s[...]

Vigor2830 Series User’s Guide 257 Stop record when fulls – when the capacity of syslog is full, the system will stop recording. Always record the new event – only the newest events will be recorded by the system. Time Display the time of the event occurred. Message Display the information for each event. F F o o r r U U S S B B S S y y s s l [...]

Vigor2830 Series User’s Guide 258 3 3 . . 1 1 5 5 . . 1 1 S S y y s s t t e e m m S S t t a a t t u u s s The System Status provides basic network settings of Vigor router. It includes L AN and WAN interface information. Also, you could ge t the current running firmware version or firmware related information from this presentation. Available set[...]

Vigor2830 Series User’s Guide 259 - It can be Europe (13 usable channels), USA (11 usable channels) etc. The available channels supported by the wireless products in different countries are various. Firmware Version - It indicates information about equipped WLAN miniPCi card. This also helps to provide availability of some features that are bound[...]

Vigor2830 Series User’s Guide 260 3 3 . . 1 1 5 5 . . 2 2 T T R R - - 0 0 6 6 9 9 This device supports TR-069 standard. It is very convenient for an administrator to m anage a TR-069 device through an Auto Configuration Server, e.g., VigorACS. Available settings are explained as follows: Item Description ACS Server On Choose the interface for the[...]

Vigor2830 Series User’s Guide 261 Periodic Inform Settings The default setting is Enable . Please set interval time or schedule time for the router to send notification to CPE. Or click Disable to close the mechanism of notification. STUN Settings The default is Disable . If you click Enable , please type the relational settings listed below: Ser[...]

Vigor2830 Series User’s Guide 262 3 3 . . 1 1 5 5 . . 4 4 U U s s e e r r P P a a s s s s w w o o r r d d This page allows you to set ne w password for user operation. Available settings are explained as follows: Item Description Enable User Mode for simple web configuration After checking this box, you can access into the web configurator with t[...]

Vigor2830 Series User’s Guide 263 3 3 . . 1 1 5 5 . . 5 5 L L o o g g i i n n C C u u s s t t o o m m i i z z a a t t i i o o n n When you want to access into the web configurator of Vigor router, the system will ask you to offer username and password first. At that mo ment, the background of the web page is blank and no heading will be displayed[...]

Vigor2830 Series User’s Guide 264 Please refer to 4.5 How to Customize Your Login Page for more details. 3 3 . . 1 1 5 5 . . 6 6 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u p p B B a a c c k k u u p p t t h h e e C C o o n n f f i i g g u u r r a a t t i i o o n n Follow the steps below to backup your configuration. 1.[...]

Vigor2830 Series User’s Guide 265 2. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself. 4. Click Save button, the configuration will download a utomatically to your[...]

Vigor2830 Series User’s Guide 266 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click Browse button to choose the correct configura tion file for uploading to the router. 3. Click Restore button[...]

Vigor2830 Series User’s Guide 267 3 3 . . 1 1 5 5 . . 7 7 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow debug equipm ents. Available settings are explained as follows: Item Description Sys[...]

Vigor2830 Series User’s Guide 268 User Access, Call, WAN, Router/DSL information to Syslog. AlertLog Setup Check “ Enable ” to activate function of alert log. AlertLog Port - Type the port number for alert log. The default setting is 514. Mail Alert Setup Check “ Enable ” to activate function of mail alert. Send a test e-mail - Make a sim[...]

Vigor2830 Series User’s Guide 269[...]

Vigor2830 Series User’s Guide 270 3 3 . . 1 1 5 5 . . 8 8 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Available settings are explained as follows: Item Description Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to us[...]

Vigor2830 Series User’s Guide 271 3 3 . . 1 1 5 5 . . 9 9 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session. Available settings ar[...]

Vigor2830 Series User’s Guide 272 Telnet and HTTP servers. Enable SNMP Agent - Check it to enable this function. Get Community - Set the name for getting community by typing a proper character. The default setting is public. Set Community - Set community by typing a proper name. The default setting is private. Manager Host IP - Set one host as th[...]

Vigor2830 Series User’s Guide 273 3 3 . . 1 1 5 5 . . 1 1 1 1 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that thi[...]

Vigor2830 Series User’s Guide 274 3 3 . . 1 1 5 5 . . 1 1 2 2 A A c c t t i i v v a a t t i i o o n n There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via System Maintenance>>Activation . After you have finished the setting profiles for WCF (refer to[...]

Vigor2830 Series User’s Guide 275 Below shows the successful activation of Web Content Filter:[...]

Vigor2830 Series User’s Guide 276 3 3 . . 1 1 6 6 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 6 6 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r i i n n g g Click Diagnostics and c[...]

Vigor2830 Series User’s Guide 277 3 3 . . 1 1 6 6 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. 3 3 . . 1 1 6 6 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Cl[...]

Vigor2830 Series User’s Guide 278 3 3 . . 1 1 6 6 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Available settings are explained as [...]

Vigor2830 Series User’s Guide 279 3 3 . . 1 1 6 6 . . 5 5 N N A A T T S S e e s s s s i i o o n n s s T T a a b b l l e e Click Diagnostics and click NAT Sessions Table to open the list page. Available settings are explained as follows: Item Description Private IP:Port It indicates the source IP address and port of local PC. #Pseudo Port It indic[...]

Vigor2830 Series User’s Guide 280 Available settings are explained as follows: Item Description Ping through Use the drop down list to choose the WAN interface that you want to ping through o r choose Unspecified to be determined by the router autom atically. Ping to Use the drop down list to choose the destination that you want to ping. IP Addre[...]

Vigor2830 Series User’s Guide 281 3 3 . . 1 1 6 6 . . 7 7 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management. You have to enable IP bandwidth limi[...]

Vigor2830 Series User’s Guide 282 Refresh Click this link to refr esh this page manually. Index Display the number of the data flow. IP Address Display the IP address of the monitored device. TX rate (kbps) Display the transmission speed of the monitored device. RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display [...]

Vigor2830 Series User’s Guide 283 3 3 . . 1 1 6 6 . . 8 8 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1/WAN2/WAN3 Bandwidth, Sessions, daily or weekly for viewing different traffic graph. Click Refresh to renew the graph at any time. The horizontal axis represents time. [...]

Vigor2830 Series User’s Guide 284 3 3 . . 1 1 6 6 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run . The result of route trace will be shown on the screen. A[...]

Vigor2830 Series User’s Guide 285 3 3 . . 1 1 6 6 . . 1 1 0 0 S S y y s s l l o o g g E E x x p p l l o o r r e e r r Such page provides real-time syslog and displays the information on the screen. F F o o r r W W e e b b S S y y s s l l o o g g This page displays the time and message fo r User/Firewall/call/WAN/VPN settings. You can check Enable[...]

Vigor2830 Series User’s Guide 286 F F o o r r U U S S B B S S y y s s l l o o g g This page displays the syslog recorded on the USB storage disk. Available settings are explained as follows: Item Description Time Display the time of the event occurred. Log Type Display the type of the record. Message Display the information for each event. 3 3 . [...]

Vigor2830 Series User’s Guide 287 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 H H o o w w t t o o C C o o n n f f i i g g u u r r e e M M u u l l t t i i - - S S u u b b n n e e t t i i n n V V i i g g o o r r 2 2 8 8 3 3 0 0 There are two types of VLAN. One is P ort B ased VLAN; the other i[...]

Vigor2830 Series User’s Guide 288 5. In the page of LAN >> General Setup , check the Status box of LAN2 and LAN3 and enable the function of DHCP. After finishing the above configuration, the equipm ent connecting to Vigor2830 LAN Port can get the corresponding IP address of the network segment. The equipment connecting to Vigor2830 LAN Port[...]

Vigor2830 Series User’s Guide 289 6. To make any two of VLAN groups linked with each other, just check the boxes of the ones in the field of Inter-LAN Routing in the page of LAN >> General Setup . Refer to the following figure. LAN2 and LAN3 are linked.[...]

Vigor2830 Series User’s Guide 290 I I I I . . T T a a g g B B a a s s e e d d V V L L A A N N By identifying the tagged message, Vigor2830 can divide the LAN Port into several VLAN groups. Such LAN port with tagged informati on will accept the packets only with VLAN ID number. For example, Vigor2830 can divide the internal departments of a compan[...]

Vigor2830 Series User’s Guide 291 5. To activate the function of VLAN Tag for VLAN3 setting, check the box of Enable and type the value (10) for VID setting. Then check P4 and set LAN4 as the Subnet . 6. In the page of LAN >> General Setup , check the Status box of LAN2, LAN3 and LAN4 and enable the function of DHCP. For the detailed settin[...]

Vigor2830 Series User’s Guide 292 2. Add four VID groups. In this case, we can e xplanation it with Port 15, 16, 17, 18 and Trunk Port 23. VLAN Name 2830-VID7, Port Members = 15 、 23 VLAN Name 2830-VID8, Port Members = 16 、 23 VLAN Name 2830-VID9, Port Members = 17 、 23 VLAN Name 2830-VID10, Port Members = 18 、 23 3. Open Vlan>> Por[...]

Vigor2830 Series User’s Guide 293 4. After finishing the above configuration, the equipment connecting to VigorSwitch Port 15 , 16, 17 and 18 can get the corresponding IP address(es) of the network segment. The equipment connecting to VigorSwitch Port 15 can get the IP address of 192.168.1.0/2 4 The equipment connecting to VigorSwitch Port 16 can[...]

Vigor2830 Series User’s Guide 294 4 4 . . 2 2 H H o o w w C C a a n n I I U U s s e e F F T T P P t t o o G G e e t t t t h h e e F F i i l l e e s s f f r r o o m m U U S S B B S S t t o o r r a a g g e e D D e e v v i i c c e e C C o o n n n n e e c c t t i i n n g g t t o o V V i i g g o o r r R R o o u u t t e e r r ? ? There are three method[...]

Vigor2830 Series User’s Guide 295 3. Setup a user account for the FTP service by using USB Application >>USB User Management. Click Enable to enable FTP/Samba User account. Here we add a new account "user1" and assign authorities “Read”, “Write” and “List” to it. 4. Click OK to save the configuration. 5. Make sure the [...]

Vigor2830 Series User’s Guide 296 7. Return to USB Application >> USB Disk Status . The information for FTP server will be shown as below. Now, users in LAN of Vigor2830 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account [...]

Vigor2830 Series User’s Guide 297 4 4 . . 3 3 H H o o w w t t o o S S e e n n d d o o u u t t S S M M S S v v i i a a V V i i g g o o r r R R o o u u t t e e r r Such vigor router supports the feature of SMS. 1. Go to Application >>Short Message Service to create a new SMS profile. 2. Click any index number link to access into the following[...]

Vigor2830 Series User’s Guide 298 want to receive the SMS in the field of Destination Number ; type the total number of the messages that the router will send out in the field of Quota ; type the shortest time interval for the system to send SMS in the field of Sending Interval . For example, it is set with 60 (seconds). If WAN1 disconnects for t[...]

Vigor2830 Series User’s Guide 299 6. Configure the settings as the following figure. Choose one of the SMS profiles. In this example, the profile “For warning” is selected. Then, click OK to save the settings. When such WAN (e.g., WAN2 in this exam ple) disconnects due to some reason, the system will use other WAN for connection instead and s[...]

Vigor2830 Series User’s Guide 300 4 4 . . 4 4 W W e e b b P P o o r r t t a a l l L L o o g g - - I I n n A A p p p p l l i i c c a a t t i i o o n n f f o o r r W W i i r r e e l l e e s s s s C C l l i i e e n n t t With the increase of hotspot deployed via Wi-Fi technology in the world, we may easily get Internet connection with the served wir[...]

Vigor2830 Series User’s Guide 301 W W i i r r e e l l e e s s s s G G e e n n e e r r a a l l S S e e t t u u p p 1. From Vigor router web configuration page, select Wireless LAN>>General Setup . 2. Check Enable Wireless LAN and set the SSID. Then click OK to save the settings. W W i i r r e e l l e e s s s s P P o o r r t t a a l l L L o o[...]

Vigor2830 Series User’s Guide 302 4. Use a Notebook or mobile device supporting Wi reless function to connect Vigor2830 via Wireless LAN. 5. Try to open a new tab in the same browser (for IE 7. 0/FireFox and above) or open a new web browser. 6. The first connection session will be redirected to DrayTek Website (specified in step 2) automatically.[...]

Vigor2830 Series User’s Guide 303 4 4 . . 5 5 H H o o w w t t o o C C u u s s t t o o m m i i z z e e Y Y o o u u r r L L o o g g i i n n P P a a g g e e Login page can be customized to fit the request of the administrator. 1. Open User Management>>General Setup . Set User-Based as the Mode and click OK to save teh settings. 2. Open User Ma[...]

Vigor2830 Series User’s Guide 304 4. Open System Maintenance>>Login Customization . Check the box to enable this function. Type a brief description (e.g., Just for Carrie ) in the field of Login De scription which will be shown on the heading of the login dialog. Next, click OK . 5. Open a new tab in the same browser (for IE 7.0/FireFox and[...]

Vigor2830 Series User’s Guide 305 4 4 . . 6 6 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d q q u u a a r r t t e e r r The most common case is that you may want to connect to networ[...]

Vigor2830 Series User’s Guide 306 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection.[...]

Vigor2830 Series User’s Guide 307 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, y ou should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based ser[...]

Vigor2830 Series User’s Guide 308 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s selected, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined i[...]

Vigor2830 Series User’s Guide 309 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: 1. Go to VPN and Remote Access and select Remote Access Cont rol to enable the necessary VPN[...]

Vigor2830 Series User’s Guide 310 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dia[...]

Vigor2830 Series User’s Guide 311 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service is selected, y [...]

Vigor2830 Series User’s Guide 312 If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A[...]

Vigor2830 Series User’s Guide 313 4 4 . . 7 7 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

Vigor2830 Series User’s Guide 314 3. Go to Remote Dial-In User . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security [...]

Vigor2830 Series User’s Guide 315 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel to Vigor router. For Win2000/XP, pleas[...]

Vigor2830 Series User’s Guide 316 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router. If a PPP-based service is selected, you should fu rther specify the remote VPN server IP address, Username, Password, and[...]

Vigor2830 Series User’s Guide 317 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 8 8 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he woul[...]

Vigor2830 Series User’s Guide 318 3. Set Inbound/Outbound ba ndwidth. Note: The rate of outbound/inbound m ust be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to se t the bandwidth value for inbound/outbound as 80% - 85% of ph ysical network speed provided by ISP to maximize the QoS performance. 4. Return [...]

Vigor2830 Series User’s Guide 319 5. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP . 6. Return to previous page. Enter th e Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS . And click OK . 7. Click Setup link for W AN2.[...]

Vigor2830 Series User’s Guide 320 8. Check Enable UDP Bandwidth Control on the bottom to prevent enorm ous UDP traffic of influent other application. Click OK . 9. If the worker has connected to the headquart er using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m ay set up an index for it. Enter the Class N[...]

Vigor2830 Series User’s Guide 321 11. Click Add to open the following window . Check the ACT box, first. 12. Then click Edit of Local Address to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s IP address. Leave other fields and click OK .[...]

Vigor2830 Series User’s Guide 322 4 4 . . 9 9 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r U U s s i i n n g g F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e U U t t i i l l i i t t y y Before upgrading your router firmware, you need to i nstall the Router Tools. The [...]

Vigor2830 Series User’s Guide 323 5. Double click on the icon of router tool. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 8. Type in your router IP, usually[...]

Vigor2830 Series User’s Guide 324 10. Click Send . 11. Now the firmware update is finished. U U s s i i n n g g W W e e b b P P a a g g e e The web page also can guide you to upgrade firm ware. Note that this example is running over Windows OS (Operating System). 1. Download the newest firmware from DrayTe k's web site or FTP site. The DrayT[...]

Vigor2830 Series User’s Guide 325 4 4 . . 1 1 0 0 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Go to Certificate Management and choose Local Certificate .[...]

Vigor2830 Series User’s Guide 326 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. 4. Connect to CA server via web browser. Follo w the instruction to subm it the request. Below we [...]

Vigor2830 Series User’s Guide 327 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below. Then you have done the request and the ser ver[...]

Vigor2830 Series User’s Guide 328 5. Back to Vigor router, go to Local Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh and you will find the below window showin g “------BEGINE CERTIFICATE------.....” 6. You may review the detail informati on of the ce[...]

Vigor2830 Series User’s Guide 329 4 4 . . 1 1 1 1 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA [...]

Vigor2830 Series User’s Guide 330 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) in to Vigor router. When finished, click refre[...]

Vigor2830 Series User’s Guide 331 4 4 . . 1 1 2 2 C C r r e e a a t t i i n n g g a a n n A A c c c c o o u u n n t t f f o o r r M M y y V V i i g g o o r r The website of MyVigor (a server located on http://myvigor.draytek.com ) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the w[...]

Vigor2830 Series User’s Guide 332 2. Click the Activate link. A login page for MyVigor web site will pop up autom atically. 3. Click the link of Create an account now . 4. Check to confirm that you accept the Agreement and click Accept .[...]

Vigor2830 Series User’s Guide 333 5. Type your personal information in this page and then click Continue . 6. Choose proper selection for your computer and click Continue .[...]

Vigor2830 Series User’s Guide 334 7. Now you have created an account successfully. Click START. 8. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the re gister[...]

Vigor2830 Series User’s Guide 335 10. When you see the following page, please type in the account and password (that y ou just created) in the fields of UserName and Password . 11. Now, click Login . Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 4 4 . . 1 1 2 2 . . 2 2 C C r[...]

Vigor2830 Series User’s Guide 336 2. Check to confirm that you accept the Agreement and click Accept . 3. Type your personal information in this page and then click Continue . 4. Choose proper selection for your computer and click Continue .[...]

Vigor2830 Series User’s Guide 337 5. Now you have created an account successfully. Click START. 6. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the re gister[...]

Vigor2830 Series User’s Guide 338 8. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login . Your account has been activated. You can access into [...]

Vigor2830 Series User’s Guide 339 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the we b configuration. Please follow sections below to check your basic installation status stage by stage. z Chec[...]

Vigor2830 Series User’s Guide 340 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong network[...]

Vigor2830 Series User’s Guide 341 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O S S 1. Double click on the current used Mac OS on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configu[...]

Vigor2830 Series User’s Guide 342 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most import[...]

Vigor2830 Series User’s Guide 343 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Open WAN >> Internet Access page and then check whether the ISP settings are set correctly. Click Details Page of WAN1/WAN2 to review the settings that you conf[...]

Vigor2830 Series User’s Guide 344 T T r r a a n n s s m m i i s s s s i i o o n n R R a a t t e e i i s s n n o o t t f f a a s s t t e e n n o o u u g g h h Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor2830. In addition, please refer to the manual of 3G USB Modem for LED S[...]

Vigor2830 Series User’s Guide 345 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the f[...]