Draytek Vigor2910V manual

[...]

Vigor2910 Series User’s Guide ii[...]

Vigor2910 Series User’s Guide iii Vigor2910 Dual-WAN Security Router User’s Guide Version: 4.0 Firmware Version: V3.2.4 Date: 11/05/2010 Copyright 2010 All rights reserve d. This publication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval syst em, or translated int[...]

Vigor2910 Series User’s Guide iv Copyright Information Copyright Declarations Copyright 2010 All rights reserved. This pub licatio n contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission f rom the copyri ght[...]

Vigor2910 Series User’s Guide v European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town sh ip, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor2910 Ser ies Routers DrayTek Corp. declares that Vigor2910 se ries of ro uters are in compliance with the following essential requirements and oth[...]

Vigor2910 Series User’s Guide vi[...]

Vigor2910 Series User’s Guide vii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1 1[...]

Vigor2910 Series User’s Guide viii 3.3.2 DM Z Host ................................................................................................................. ....... 55 3.3.3 Open Ports ............................................................................................................... ....... 58 3.3.4 Addres s Mappi ng ........[...]

Vigor2910 Series User’s Guide ix 3.12 IS DN ...................................................................................................................... ............ 162 3.12.1 Genera l Setup ........................................................................................................... .. 163 3.12.2 Dialing to a Single ISP [...]

Vigor2910 Series User’s Guide x 4.2 Create a Remote Dial-in User Connecti on Between the T elework er and Headquarter ...... 224 4.3 QoS Setti ng Exam ple ........................................................................................................ .. 228 4.4 LAN – Created by Using NA T ...............................................[...]

Vigor2910 Series User’s Guide 1 1 P P r r e e f f a a c c e e The Vigor2910 series router provides Dual-WAN interface (which is a configuration second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (SuperG TM ). Object-oriented fire[...]

Vigor2910 Series User’s Guide 2 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powered of f. DMZ On DMZ Host is specified in cert ain site. On The QoS func[...]

Vigor2910 Series User’s Guide 3 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe red off. DMZ On DMZ Host is specified in cert ain site. On The QoS f[...]

Vigor2910 Series User’s Guide 4 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 i i L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powered of f. On Th e ISDN network is correctly setup. ISDN Blinkin g A [...]

Vigor2910 Series User’s Guide 5 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe red off. DMZ On DMZ Host is specified in cert ain site. On The phon[...]

Vigor2910 Series User’s Guide 6 1 1 . . 2 2 . . 5 5 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is p owered off. DMZ On DMZ Host is specified in cert ain site. On The p[...]

Vigor2910 Series User’s Guide 7 1 1 . . 2 2 . . 6 6 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V G G i i L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is p owered off. On The ISDN network is correctly setup. ISDN Blinki[...]

Vigor2910 Series User’s Guide 8 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect this device to a router/modem with an Ethernet cable. 2. Connect one port of 4-port switch to your computer with a RJ-45 cable. [...]

Vigor2910 Series User’s Guide 9 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The exam ple provided here is made based on Windows XP/2000. For Windows 98/SE, please visit w[...]

Vigor2910 Series User’s Guide 10 3. Open File->Add a New Computer . A welcome dialog will appear. Please click Next . 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port . Click Next .[...]

Vigor2910 Series User’s Guide 11 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port nam e. Then, click Next . 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish .[...]

Vigor2910 Series User’s Guide 12 9. Now, your system will ask you t o choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next . 10. For the final stage, you need to g o back to Control Panel-> Printers and edit the property of the new [...]

Vigor2910 Series User’s Guide 13 Note 1: Some printers with the fax/scanning or other a dditional fun ctions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ ; find out the link of Printer Server and click it; then click the What types o[...]

Vigor2910 Series User’s Guide 14 This page is left blank.[...]

Vigor2910 Series User’s Guide 15 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator and [...]

Vigor2910 Series User’s Guide 16 3. Now, the Main Screen will pop up. Notice that the main screen differs according to the model of the router that you have. Below is an example. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type a new one in[...]

Vigor2910 Series User’s Guide 17 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After ty ping the passwor[...]

Vigor2910 Series User’s Guide 18 On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. Fo r example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. In the Quick Start Wizard , you can configure the router to access the I[...]

Vigor2910 Series User’s Guide 19 User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password for confirmation. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system statu[...]

Vigor2910 Series User’s Guide 20 2 2 . . 2 2 . . 2 2 P P P P T T P P Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.[...]

Vigor2910 Series User’s Guide 21 2 2 . . 2 2 . . 3 3 S S t t a a t t i i c c I I P P Click Static IP as the protocol. Type in all the inform ation that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the [...]

Vigor2910 Series User’s Guide 22 2 2 . . 2 2 . . 4 4 L L 2 2 T T P P Click L2TP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this [...]

Vigor2910 Series User’s Guide 23 2 2 . . 2 2 . . 5 5 D D H H C C P P Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this [...]

Vigor2910 Series User’s Guide 24 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE as the protocol, you will find out a button of Dial PPPoE or Dial PPPoE i n the Online Status web page. O[...]

Vigor2910 Series User’s Guide 25 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface.[...]

Vigor2910 Series User’s Guide 26 2 2 . . 4 4 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your setti[...]

Vigor2910 Series User’s Guide 27 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed infor[...]

Vigor2910 Series User’s Guide 28 3 3 . . 1 1 . . 2 2 N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n b b y y 3 3 G G U U S S B B M M o o d d e e m m For 3G mobile communication through Access Point is popular more and more, Vigor 2910 adds the function of 3G network connection for such purpose. By connecting 3G USB Modem to th[...]

Vigor2910 Series User’s Guide 29 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface. Display Name Type the description for the WAN1/WAN2 interface. Physical Mode For WAN1, the physical connection is done and fixed through Ethernet port; yet the physical connection for WAN2 is [...]

Vigor2910 Series User’s Guide 30 Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the best load balance. Line Speed If your choose According to Line Speed as the Load Balance Mode , please type the line s[...]

Vigor2910 Series User’s Guide 31 3 3 . . 1 1 . . 4 4 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent Physical Mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly. Ind[...]

Vigor2910 Series User’s Guide 32 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E To use PPPoE as the accessing protocol of the internet, please choose Internet Acce ss fro m WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown. PPPoE Client Mode Click Enable for activating this function. If [...]

Vigor2910 Series User’s Guide 33 None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. WAN Connection Detection Such function allows you to ve rify whether network connection is alive or not through ARP Detect or Ping Detect. Mode – Choose A[...]

Vigor2910 Series User’s Guide 34 address in the box of Fixed IP Address . Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address f or the router manually. After finishing all the settings here, please click OK to ac[...]

Vigor2910 Series User’s Guide 35 Due to the absence of the ISDN in terface in some models, the ISDN dial backup feature and its associated setup options are not available to them. Please refer to the previous part for further information. None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local ho[...]

Vigor2910 Series User’s Guide 36 Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode. Router Name : Type in the router name provided by ISP. Domain Name : Type in the domain name that you have assigned. Specify an IP address – Click this radio button to specify some [...]

Vigor2910 Series User’s Guide 37 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P T T P P / / L L 2 2 T T P P To use PPTP as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPTP mode for WAN2. The following web page will be shown. PPTP/L2TP Client Mode Enable PPTP- Click this radio [...]

Vigor2910 Series User’s Guide 38 information. None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. MTU It means Max Transmit Unit for packet. The default setting is 1442. PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for PPP. [...]

Vigor2910 Series User’s Guide 39 WAN IP Network Settings Obtain an IP address automatically – Click this button to obtain the IP address automatically. Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. D D e e t t a a i i l l s s P P a a g g e e f f [...]

Vigor2910 Series User’s Guide 40 3 3 . . 1 1 . . 5 5 L L o o a a d d - - B B a a l l a a n n c c e e P P o o l l i i c c y y This router supports the function of load balanc ing. It can assign traffic with protocol t ype, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN1 or WAN2 interface. The user can assign[...]

Vigor2910 Series User’s Guide 41 Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Binding WAN interface Choose the WAN interface (WAN1 or WAN2) for binding. Src IP Start Type the source IP start for the specified WAN interface. Src IP End Type the source IP end for the[...]

Vigor2910 Series User’s Guide 42 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router is[...]

Vigor2910 Series User’s Guide 43 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the r[...]

Vigor2910 Series User’s Guide 44 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask T [...]

Vigor2910 Series User’s Guide 45 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.2 or greater , but smaller than 220.135.240. 254. IP Pool Counts: Enter the number of IP addresses[...]

Vigor2910 Series User’s Guide 46 of the router , which means the router is the default gateway . DHCP Server IP Addr ess for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Interne[...]

Vigor2910 Series User’s Guide 47 Index The number (1 to 10) unde r Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i[...]

Vigor2910 Series User’s Guide 48 Note : There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet (192. 168.1.0/24). The second is that those hosts on the internal private subnets (e x. 192.168.10.0/24) can access [...]

Vigor2910 Series User’s Guide 49 3 3 . . 2 2 . . 4 4 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthen control i n network. When this functi on is enabled, all the assigne d IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC addres[...]

Vigor2910 Series User’s Guide 50 Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List . Edit It allows you to edit and modify the selected IP address and MAC address that you create before. Delete You can remove any item listed in IP Bind List . Simply click and se[...]

Vigor2910 Series User’s Guide 51 Share vpn remote dial in profile – you can share the account set in remote VPN dial-in profiles. Click this button and press Account Setting link to choose one of the accounts (total 32 profiles) for applying to the web authentication. Timeout Setting Users might have to re-login after passing the timeout settin[...]

Vigor2910 Series User’s Guide 52 3 3 . . 3 3 N N A A T T Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that one or more private IP a ddresses can be mapped into a single public one. Public IP address is usually assigned by your ISP, for which you may get charged. Private IP addresses are recognized [...]

Vigor2910 Series User’s Guide 53 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-m apping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection.[...]

Vigor2910 Series User’s Guide 54 Mode Two options are provided here for you to choose. To set a range for the specific service, select Range. Service Name Enter the description of the specific network service. Protocol Select the transport layer protocol (TCP or UDP). Public Port Specify which port can be redirected to the specified Private IP an[...]

Vigor2910 Series User’s Guide 55 3 3 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (A H), do not travel on a fixed por[...]

Vigor2910 Series User’s Guide 56 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: WAN1 This page allows you to set Private IP or Active True IP as the DMZ host. Private IP If you choose Private I[...]

Vigor2910 Series User’s Guide 57 Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this button and then a window will autom atically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network. Select one private IP address in the list t[...]

Vigor2910 Series User’s Guide 58 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application [...]

Vigor2910 Series User’s Guide 59 To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Enable Open Ports Check to enable this entry. Comment Make a name for the define d network application/service. WAN Interface Specify t[...]

Vigor2910 Series User’s Guide 60 to Internet. You can use address mapping func tion to achieve this demand. Simply type 192.168.1.10 as the Private IP; and t ype 86.123.123.2 as the WAN IP. Protocol Display the protocol used for this address mapping. Public IP Display the public IP address se lect ed for this entry, e.g., 172.16.3.102. Private IP[...]

Vigor2910 Series User’s Guide 61 IP to connect to Internet. If you want to choose any one of the Public IP settings, you must specify some IP addresses in the IP Alias List of the Static/DHCP Configuration page first. If you di d not type in any IP address in the IP Alias List, the Public IP setting will be empty in this field. When you click App[...]

Vigor2910 Series User’s Guide 62 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address. If you choose LAN as the Interface here, and choose LAN as the di[...]

Vigor2910 Series User’s Guide 63 3 3 . . 4 4 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN [...]

Vigor2910 Series User’s Guide 64 3 3 . . 4 4 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Name Type a name for this profile. Protocol Sp[...]

Vigor2910 Series User’s Guide 65 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first and last values are different, it indicates that all the ports except the range defined here are available for this service type. (>) – the port number greater than this value is avail[...]

Vigor2910 Series User’s Guide 66 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All the available IP objects will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box. 3 3 . . 4 4 . . 5 5 I I M M O O b b j j e e c c t t [...]

Vigor2910 Series User’s Guide 67 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allo wed to access into the forbidden items. 3 3 . . 4 4 . . 6 6 P P 2 2 P P O O b b j j e e c c t t You can define policy profiles for P2P (Point-to-Poi nt) applica[...]

Vigor2910 Series User’s Guide 68 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allo wed to access into the forbidden items. In the above figure, BitTorrent protocol is disallowed if you apply such object profile as filtering rule (setting in Fi[...]

Vigor2910 Series User’s Guide 69 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allo wed to access into the forbidden items. 3 3 . . 5 5 C C S S M M C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n [...]

Vigor2910 Series User’s Guide 70 For example, an ActiveX control object is usually used for providing interactive web feature. If malicious code hides inside, it may occupy user’s system. W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r We all know that the content on the Internet just like other types of media may be inappropria[...]

Vigor2910 Series User’s Guide 71 Profile Name Type a name for the CSM profile. Each profile can contain three objects settings, IM Object, P2P Object and Misc Object. Such profile can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. 3 3 . . 5 5 . . 2 2 U U R R L L C [...]

Vigor2910 Series User’s Guide 72 Enable URL Access Control Check the box to activate URL Access Control. Black List (block those matching keyword) Click this button to restrict accessing into the corresponding webpage with the keywords listed on the box below. White List (pass those matching keyword) Click this button to allow accessing into the [...]

Vigor2910 Series User’s Guide 73 Y ou must clear your browser cache first so that the URL content filtering facility operates properly on a web page that you visited before. Enable Restrict Web Feature Check the box to activate the function. Java - Check the checkbox to activate the Block Java object function. The Vigor router will discard the Ja[...]

Vigor2910 Series User’s Guide 74 3 3 . . 5 5 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible pare nt or employer, you should protect those in your trust against the hazard[...]

Vigor2910 Series User’s Guide 75 3 3 . . 6 6 F F i i r r e e w w a a l l l l 3 3 . . 6 6 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor[...]

Vigor2910 Series User’s Guide 76 I I P P F F i i l l t t e e r r s s Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter . z Call Filter - When there is no existing Internet connection, Call Fi[...]

Vigor2910 Series User’s Guide 77 D D e e n n i i a a l l o o f f S S e e r r v v i i c c e e ( ( D D o o S S ) ) D D e e f f e e n n s s e e The DoS Defense functionality helps you to detect and mitigate the DoS attack. The attacks are usually categorized into two types, the fl ooding-type attacks and the vulnerability attacks. The flooding-type [...]

Vigor2910 Series User’s Guide 78 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Filter Default rule is applied in this page. Pass – All the packets are allowed to pass throu[...]

Vigor2910 Series User’s Guide 79 3 3 . . 6 6 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule num ber button to e[...]

Vigor2910 Series User’s Guide 80 Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index (1-15) Set the PCs on LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 sc hedules pre-defined in Application[...]

Vigor2910 Series User’s Guide 81 Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type. From the IP Group drop down list, choose the one that you want to apply. Or use the IP Object dro[...]

Vigor2910 Series User’s Guide 82 Service Group/Object - Use the drop down list to choose the one that you want. Fragments Specify the action for fragmented packets. And it is used for Data Filter only. Don’t care - No action will be taken towards fragmented packets. Unfragmented - Apply the rule to unfragmented packets. Fragmented - Apply the r[...]

Vigor2910 Series User’s Guide 83 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is composed by 7 filter rules, which can be [...]

Vigor2910 Series User’s Guide 84 3 3 . . 6 6 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defense [...]

Vigor2910 Series User’s Guide 85 port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router will ignore any IP packets with IP option field in the datagram header. The r[...]

Vigor2910 Series User’s Guide 86 SYN packets with the identical source and destination addresses, as well as the port number to victims. Block Unknown Protocol Check the box to activate the Block Unknown Protocol function. Individual IP packet has a protocol field in the datagram header to indicate the protocol type running over the upper layer. [...]

Vigor2910 Series User’s Guide 87 3 3 . . 7 7 B B a a n n d d w w i i d d t t h h M M a a n n a a g g e e m m e e n n t t Below shows the menu items for Bandwidth Management. 3 3 . . 7 7 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router. The router will generate the r[...]

Vigor2910 Series User’s Guide 88 Maximum Sessions Defines the available session number for specific ran ge of IP addresses. If you do not set the session number in this field, the system will use the defa ult session limit for the specific limitation you set for each index. Add Adds the specific session limitation onto the list above. Edit Allows[...]

Vigor2910 Series User’s Guide 89 Default TX limit Define the default speed of the upstream for each computer in LAN. Default RX limit Define the default speed of the downstream for each computer in LAN. Limitation List Display a list of specific limitations that you set on this web page. Start IP Define the start IP address for limit bandwidth. E[...]

Vigor2910 Series User’s Guide 90 z Scheduling: Based on classification of service level to assign packets to queues and associated service types The basic QoS implementation in Vigor routers is to classify and schedule packets based on the service type information in the IP header. Fo r instance, to ensure the connection with the headquarter, a t[...]

Vigor2910 Series User’s Guide 91 This page displays the QoS settings result of the WAN interface. Click the Setup link to access into next page for the general setup of WAN (1/2) interface. As to class rule, si mply click the Edit link to access into next for configuration. You can configure general setup for the WAN interface, edit the Class Rul[...]

Vigor2910 Series User’s Guide 92 Reserved Bandwidth Ratio It is reserved for the group index in the form of ratio of reserved bandwidth to upstream speed and reserve d bandwidth to downstream speed . Enable UDP Bandwidth Control Check this and set the limited bandwidth ratio on the right field. This is a protection of TCP application traffic sinc[...]

Vigor2910 Series User’s Guide 93 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Source Address Click the SrcEdit button to set the source address for the rule. Destination Address Click the DestEdit button to set the destination address for the rule. SrcEdit/DestEdit It allows you to edit[...]

Vigor2910 Series User’s Guide 94 Service Type It determines the service type of the data for processing with QoS control. It can also be edited. You can choose the predefined service type from the Service Type drop down list. Those types are predefined in factory. Simply choose the one that you want for using by current QoS. By the way, you can s[...]

Vigor2910 Series User’s Guide 95 For adding a new rule, click Add to open the following page. If you want to edit an existed service type, please select the radio button of that one and click Edit to open the following page for modification. Service Name Type in a new service for your request. Service Type Choose the t ype (TCP, UDP or TCP/UDP) f[...]

Vigor2910 Series User’s Guide 96 3 3 . . 8 8 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 8 8 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address assigned to y[...]

Vigor2910 Series User’s Guide 97 Index Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN Interface Display current WAN interface used for accessing Internet. Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. View[...]

Vigor2910 Series User’s Guide 98 Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup , and push Clear All button to disable the function and clear all accounts from the router. Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push C[...]

Vigor2910 Series User’s Guide 99 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply during[...]

Vigor2910 Series User’s Guide 100 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE In ternet access profile. Now , the PPPoE Internet connection will follow the schedule order to perform For ce On or Force Down action according to the time plan that has been pre-defined in the sche[...]

Vigor2910 Series User’s Guide 101 3 3 . . 8 8 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT router[...]

Vigor2910 Series User’s Guide 102 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Softw are Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will blo ck the accessing ability of some network ports. Security Considerations Activating[...]

Vigor2910 Series User’s Guide 103 3 3 . . 8 8 . . 5 5 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol . It is a communication protocol which is mainly used for managing the membership of Internet Protocol m ulticast groups. Enable IGMP Proxy Check this box to enable this function. The application of multicast will b[...]

Vigor2910 Series User’s Guide 104 Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box.[...]

Vigor2910 Series User’s Guide 105 3 3 . . 9 9 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet. In short, by VPN technology, you can send data between two computers across a shared[...]

Vigor2910 Series User’s Guide 106 Please choose a LAN-to-LAN Profile There are 32 VPN tunnels for users to set. When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to [...]

Vigor2910 Series User’s Guide 107 the choices for the client profile, please click Next . You will see different configurations based on the selection(s) you made. z When you choose PPTP (None Encry ption) or PPTP (Encryption) , you will see the following graphic: z When you choose IPSec , you will see the following graphic: z When you choose L2T[...]

Vigor2910 Series User’s Guide 108 z When you choose L2TP over IPSec (Nice to Have), you will see the following graphic: z When you choose L2TP over IPSec (Must), you will see the following graphic:[...]

Vigor2910 Series User’s Guide 109 Profile Name Type a name for such profile. The length of the file is limited to 10 characters. VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router will use WAN1 as the first channel for[...]

Vigor2910 Series User’s Guide 110 Profiles (set from VPN and Remote Access>>IPSec Peer Identity ). IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authent[...]

Vigor2910 Series User’s Guide 111 3 3 . . 9 9 . . 2 2 V V P P N N S S e e r r v v e e r r W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connec tion (from client to server) step by step. VPN Server Mode Selection Choose the direction for th[...]

Vigor2910 Series User’s Guide 112 Please choose a Dial-in User Accounts This ite m is available when y ou choose Re mote Dial-in User (Teleworker) as VPN server mode. There are 32 VPN tunnels for users to set. Allowed Dial-in Type This item is available after you choose any one of dial-in user account profiles. Next, you have to select suitable d[...]

Vigor2910 Series User’s Guide 113 Profile Name Type a name for such profile. The length of the file is limited to 10 characters. User Name This field is used to authenticate for connection when you select PPTP or L2TP with or without IPSec policy above. Password This field is used to authenticate for connection when you select PPTP or L2TP with o[...]

Vigor2910 Series User’s Guide 114 z When you check IPSec , you will see the following graphic: After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on t he page and click Finish to execute the next action.[...]

Vigor2910 Series User’s Guide 115 Go to the VPN Connection Management Click this radio button to access VPN and Remote Access>>Connection Management for viewing VPN Connection status. Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server through VPN Server Wizard. View more detailed configuration Cl[...]

Vigor2910 Series User’s Guide 116 Enable L2TP VPN Service Check this box to activate the VPN service through L2TP protocol. Enable ISDN Dial-IN This feature is available for i model. Check this box to activate the ISDN dial-in. 3 3 . . 9 9 . . 4 4 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related[...]

Vigor2910 Series User’s Guide 117 authentication. You should further specify the User Name and Password of the mutual authentication peer. Start IP Address Enter a start IP address for the dial-in PPP connection. You should choose an IP address from the local private network. For example, if the local private network is 192.168.1.0/2 55.255.255.0[...]

Vigor2910 Series User’s Guide 118 IKE Authentication Method This usually applies to those are remote dial-in user or node (LAN to LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel. Pre-Shared Key - Currently only suppor t Pre-Shared Key authentication. Pre-Shared Key- Specify a key for I[...]

Vigor2910 Series User’s Guide 119 Profile Name Type in a name in this file. Enable this account -Check this box to enable such profile. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can[...]

Vigor2910 Series User’s Guide 120 3 3 . . 9 9 . . 7 7 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection. You may set parameters including specified connection peer ID, con[...]

Vigor2910 Series User’s Guide 121 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback function b[...]

Vigor2910 Series User’s Guide 122 aggressive mode). Uncheck the checkbox- This means the connection type you select above will apply the authentication methods and security methods in the general settings . Netbios Naming Packet Pass – Click it to have an inquiry for data transm ission between the hosts located on both sides of VPN Tunnel while[...]

Vigor2910 Series User’s Guide 123 Specify the callback number -The option is for extra security. Once enabled, the router will ONLY call back to the specified Callback Number. Check to enable callback budget control -By default, the callback function has a time restriction. Once the callback budget has been exhausted, th e callback mechanism will[...]

Vigor2910 Series User’s Guide 124 Click each index to edit each profile and you will get the following page. Each LAN to LAN profile includes 4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. When VPN TRUNK is activated, several fields (e.g., Dial-[...]

Vigor2910 Series User’s Guide 125 Profile Name Specify a name for the profile of the LAN to LAN connection. Enable this profile Check here to activate this profile. VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router wi[...]

Vigor2910 Series User’s Guide 126 the state of a VPN connection for router’s judgment of redial. Normally, if any one of VPN peers wants to disconnect the connection, it should follow a serial of packet exchange procedure to inform each other. However, if the remote peer disconnect without notice, Vigor router will by no where to know this situ[...]

Vigor2910 Series User’s Guide 127 IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy. Medium Authentication Header (AH) means d ata will be authenticated, but not be encrypte d. By default, this option is active. High (ESP-Encapsulating Security Payload)- means payload (data) will be encrypted and au[...]

Vigor2910 Series User’s Guide 128 IKE phase 2 proposal- To propose the local available algorithms to the VPN peers, and get its feedback to find a match. Three combinations are available for both modes. We suggest you select the combination that covers the most algorithms. IKE phase 1 key lifetime- For security reason, the lifetime of key should [...]

Vigor2910 Series User’s Guide 129 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN to LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for i model only. In addition, you can further set up Callback function below. PPTP Allow the[...]

Vigor2910 Series User’s Guide 130 connection employed the L2TP without IPSec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection. Must- Specify the IPSec policy to be definitely applied on the L[...]

Vigor2910 Series User’s Guide 131 Callback number -The option is for extra security. Once enabled, the router will ONLY call back to the specified Callback Number. Callback Budget (Unit: minutes) - By default, the callback function has limitation of callback period. Once the callback budget is exhausted, the function will be disabled automaticall[...]

Vigor2910 Series User’s Guide 132 More Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. RIP Direction The option specifies the direction of RIP (Routing I nformation Proto[...]

Vigor2910 Series User’s Guide 133 3 3 . . 9 9 . . 9 9 V V P P N N B B a a c c k k u u p p M M a a n n a a g g e e m m e e n n t t VPN Backup Management is a backup mechanis m to set multiple VPN tunnels for using as backup tunnel. It can assure the network connection would not be cut off due to network environment blocked by any reason. F F e e a[...]

Vigor2910 Series User’s Guide 134 Name (on Backup Profile field) Display the name of VPN TRUNK profile. Member1 (on Backup Profile field) Display the dial-out profile selected from the Member1 drop down list below. Active (on Backup Profile field) “Yes” means normal condition. ”No” means the state might be disabled or that profile current[...]

Vigor2910 Series User’s Guide 135 T T i i m m e e f f o o r r a a c c t t i i v v a a t t i i n n g g V V P P N N B B a a c c k k u u p p p p r r o o f f i i l l e e VPN TRUNK backup will be activated automati cally after the initial connection of single VPN Tunnel off-line. The content in Member1/2 within VPN TRUNK backup profile is similar to d[...]

Vigor2910 Series User’s Guide 136 3 3 . . 9 9 . . 1 1 0 0 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You m ay also aggressively Dial-out by using Dial-out Tool and clicking Dial button. General[...]

Vigor2910 Series User’s Guide 137 Refresh Seconds Choose the time for refresh the dial inform ation among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Note: The status of LAN to LAN for ISDN is shown on the page of Online Status .[...]

Vigor2910 Series User’s Guide 138 3 3 . . 1 1 0 0 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc., and the digital signature of th[...]

Vigor2910 Series User’s Guide 139 Type in all the information that the window request. Then click Generate again. Import Click this button to im port a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After [...]

Vigor2910 Series User’s Guide 140 3 3 . . 1 1 0 0 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. [...]

Vigor2910 Series User’s Guide 141 3 3 . . 1 1 0 0 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them . If you want to set encryption password for these certificates, please ty[...]

Vigor2910 Series User’s Guide 142 3 3 . . 1 1 1 1 V V o o I I P P Voice over IP network (VoIP) enables you to use your broadband Internet connection to make toll quality voice calls over the Internet. There are many different call signaling protocols, methods by which VoIP devices can talk to each other. The most popular protocols are SIP, MGCP, [...]

Vigor2910 Series User’s Guide 143 only have to using dial plan or directly dial your friend’s account name if you are with the same SIP Registrar. Please refer to the section 4.5.1. z Peer-to-Peer Before calling, you have to know your friend’s IP Address. The Vigor VoIP Routers will build connection between each other. Please refer to the sec[...]

Vigor2910 Series User’s Guide 144 Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your frien[...]

Vigor2910 Series User’s Guide 145 This page will differ for different models. Below is a sample page obtained from Vigor 2910VGi. The selection of Loop through and Backup Phone Number is only available for 2910VGi model. Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, us[...]

Vigor2910 Series User’s Guide 146 type in backup phone number (PSTN number) for this VoIP phone setting. D D i i g g i i t t M M a a p p For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial[...]

Vigor2910 Series User’s Guide 147 SIP server. OP Number The front number you type here is the first part of the account number that you want to execute special function (according to the chosen mode) by using the prefix num ber. Min Len Set the minimal length of the dial number for appl ying the prefix number settings. Take the above picture (Pre[...]

Vigor2910 Series User’s Guide 148 Profile Display the profile name of the account. Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the SIP proxy server. Account Name Display the account name of SIP address before @. Ring Port Specify which port will ring when receiving[...]

Vigor2910 Series User’s Guide 149 Profile Name Assign a name for this profile for identifying. You can t ype similar name with the domain. For example, if the domain name is draytel.org , then you m ight set draytel-1 in this field. Register via If you want to make VoIP call without register personal information, please choose None and check the [...]

Vigor2910 Series User’s Guide 150 Authentication ID Check the box to invoke this function and enter the name or number used for SIP Authorization with SIP Registrar. If this setting value is the same as Account Name, it is not necessary for you to check the box and set any value in this field. Password The password provided to you when you regist[...]

Vigor2910 Series User’s Guide 151 3 3 . . 1 1 1 1 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone settings for VoIP 1 and VoIP 2 respectively. Phone List Port – There are three phone ports provided here for you to configure. Call feature – A brief description for call feature will be shown in thi[...]

Vigor2910 Series User’s Guide 152 DTMF Relay – Display DTMF mode that configured in the advanced settings page of Phone Index. RTP Symmetric RTP – Check this box to invoke the function. To make the data transmission going through on both ends of local router and remote router not misleading due to IP lost (for example, sending data from the p[...]

Vigor2910 Series User’s Guide 153 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r V V o o I I P P 1 1 a a n n d d 2 2 Click the number 1 or 2 link under Index column, you can access into the following page for configuring Phone settings. Hotline Check the box to enable it. Type in the SIP URL in the field for dialing a[...]

Vigor2910 Series User’s Guide 154 Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigured schedules. Refer to section 3.5.2 Schedule for detailed configuration. Index (1-60) in Phone Book - Enter the index of phone book profiles. Refer to section 3.10.1 DialPlan – Phone Book for det[...]

Vigor2910 Series User’s Guide 155 Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It determines the default direction for the call route of the router. To ISDN (for VoIP) - The router is set by using ISDN call. To change ISDN call into VoIP call, please dial the character in this field for t[...]

Vigor2910 Series User’s Guide 156 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Caller ID Type There are several standards provided here for displaying the caller ID on the panel of the telephone set. Choose the one that is suitable for the phone set according to[...]

Vigor2910 Series User’s Guide 157 useful when the network traffic congestion occurs and it still can remain the accuracy of DTMF tone. SIP INFO - Choose this one then the Vigor will capture the DTMF tone and transfer it into SIP form. Then it will be sent to the remote end with SIP message. Payload Type (rfc2833) Choose a number from 96 to 127, t[...]

Vigor2910 Series User’s Guide 158 only when the local system is busy. No answer means if the incoming calls do not receive any response, they will be forwarded to the SIP URL by the time out. SIP URL – Type in the SIP URL (e.g., aaa@draytel.org or abc@iptel.org) as the site for call forwarded. Time Out – Set the time out for the call forwardi[...]

Vigor2910 Series User’s Guide 159 something to save the bandwidth for other using. Click On to invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile names for the accounts as the default one for this phone sett[...]

Vigor2910 Series User’s Guide 160 page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy to ne, congestion tone by yourself for VoIP phone. Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP com[...]

Vigor2910 Series User’s Guide 161 Payload Type (rfc2833) - Choose a nu mber from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. Disallow VoIP to ISDN Calls with the Following Prefixes Set the prefix of the phone number to forbid the user dialing through VoIP to ISDN. All the phone number with the p[...]

Vigor2910 Series User’s Guide 162 for the physical ISDN port. Be aware that ISDN1/2 port is available for the users living in Europe and using Vigor 2910VGi only. For other V models, only the status for VoIP1 and VoIP2 will be shown in this page. Status It shows the VoIP connection status. IDLE - Indicates that the VoIP function is idle. HANG_UP [...]

Vigor2910 Series User’s Guide 163 3 3 . . 1 1 2 2 . . 1 1 G G e e n n e e r r a a l l S S e e t t u u p p This page provides some basic ISDN settings such as enabling the ISDN port or not, MSN numbers and blocked MSN numbers, etc. ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local[...]

Vigor2910 Series User’s Guide 164 3 3 . . 1 1 2 2 . . 2 2 D D i i a a l l i i n n g g t t o o a a S S i i n n g g l l e e I I S S P P If you access the Internet via a single ISP, press this link. ISP Name Enter your ISP name. Dial Number Enter the ISDN access number provided by your ISP. Username Enter the username provided by your ISP. Password [...]

Vigor2910 Series User’s Guide 165 Yes t o invoke this function and enter the IP address in the field of Fixed IP Address . Fixed IP Address Type the IP address. 3 3 . . 1 1 2 2 . . 3 3 D D i i a a l l i i n n g g t t o o D D u u a a l l I I S S P P s s If you have more than one ISP, press this link to confi gure two ISP dialup profiles. You will [...]

Vigor2910 Series User’s Guide 166 As depicted in the above application scenario , the V irtual T A client can make an outgoing call or accept an incoming call to/from a peer F AX machine or ISDN T A, etc. Before describing the configuration of Virtua l TA in the Vigor routers, please heed the following limitations. z The Virtual TA client only su[...]

Vigor2910 Series User’s Guide 167 I I n n s s t t a a l l l l a a V V i i r r t t u u a a l l T T A A C C l l i i e e n n t t 1. Insert the CD-ROM bundled with your V igor router . Find VT A Client tool in the Utility menu and click on the Install button. 2. Follow the on-screen instructions of the installer . The last step will ask you to restar[...]

Vigor2910 Series User’s Guide 168 Click the V irtual T A Login tab to launch the login box. Enter the Username/Password and then click OK . After a short time, the VT icon text will turn green. M M S S N N C C o o n n f f i i g g u u r r a a t t i i o o n n If you have applied to an MSN number service, th e V irtual T A server can assign which cl[...]

Vigor2910 Series User’s Guide 169 3 3 . . 1 1 2 2 . . 5 5 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router ( only for the ISDN m odels) be remotely activated, or be able to dial up to the ISP via the ISDN interface. Vigor router s provide this feature by allowing user to make a phone call to the router and the[...]

Vigor2910 Series User’s Guide 170 PPP Authentication It specifies th e PPP authentication method for PPP/MP connections. Normally you can set it to PA P / C H A P for better compatibility . TCP Header Compression VJ Compr ession - It is used for TCP/IP protocol header compression. Normally it is set to None to improve bandwidth utilization. Idle [...]

Vigor2910 Series User’s Guide 171 3 3 . . 1 1 3 3 W W i i r r e e l l e e s s s s L L A A N N This function is used for G models only. 3 3 . . 1 1 3 3 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed tremendous growth. Wireless technology now reaches or is capable o[...]

Vigor2910 Series User’s Guide 172 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit ke y. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys. WPA(Wi-Fi Protected Access), the most domina ting [...]

Vigor2910 Series User’s Guide 173 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each othe r. To elaborate an example for business use, you may set up a wireless LAN for visit[...]

Vigor2910 Series User’s Guide 174 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Check the box to enable wi[...]

Vigor2910 Series User’s Guide 175 selected channel is under serious interference. Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN. Depending on the wireless utility, the user may only see the information except SSID or just cannot see any thing about Vigor wireless[...]

Vigor2910 Series User’s Guide 176 3 3 . . 1 1 3 3 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP Only - Accepts only WEP clients [...]

Vigor2910 Series User’s Guide 177 either Mixed or WPA2 only in the field below. Since the key will be auto-negotiated during authentication, the field of key setting below will be not available for input. WPA The WPA encrypts each frame transmitted from the radio using the key, which either PSK entered manually in this field below or automaticall[...]

Vigor2910 Series User’s Guide 178 3 3 . . 1 1 3 3 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wire less LAN MAC address of client. Only the valid MAC address that has been configured can access[...]

Vigor2910 Series User’s Guide 179 OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 3 3 . . 1 1 3 3 . . 5 5 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge [...]

Vigor2910 Series User’s Guide 180 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Mode Choos[...]

Vigor2910 Series User’s Guide 181 Security There are thr ee types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page. If you did not set any key in[...]

Vigor2910 Series User’s Guide 182 3 3 . . 1 1 3 3 . . 6 6 A A P P D D i i s s c c o o v v e e r r y y Vigor router can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know whic h channel is clean for usage. Also, it can be used to facilitate finding an AP for a WDS link. Notice that [...]

Vigor2910 Series User’s Guide 183 3 3 . . 1 1 3 3 . . 7 7 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of connecting wire less clients now along with its status code. There is a code summary belo w for explanation. For convenient Access C o ntrol , you can select a WLAN station and click Add to Access Control be[...]

Vigor2910 Series User’s Guide 184 3 3 . . 1 1 3 3 . . 8 8 S S t t a a t t i i o o n n R R a a t t e e C C o o n n t t r r o o l l This page allows you to cont rol the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting. The range for the rate is between 100 ~ 30,000 kbps. 3 3 . . 1 1 3[...]

Vigor2910 Series User’s Guide 185 example, force the wireless user(s) in hotel to access into the web page that the hotel wants the user(s) to visit. Show the message Type words or sentences here. The message will be displayed on the screen for several seconds when the wireless users access into the web page through the router. 3 3 . . 1 1 4 4 V [...]

Vigor2910 Series User’s Guide 186 P1 – P4 Check the box to make the com puter connecting to the port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box. For exam ple, if you check the boxes of VLAN0-P1 and VLAN1-P1, you can make P1 to be grouped under VLAN0 and VL[...]

Vigor2910 Series User’s Guide 187 7890 in the boxes of W_VLAN1. Users can conf igure fifteen groups of wireless VLAN in this page. Enable Check this box to invoke wireless VLAN function. Login ID Type Login ID for different groups of W_VLAN with 1 to 1 1 characters. Password Type password for different groups of W_VLAN with 1 to 11 characters. De[...]

Vigor2910 Series User’s Guide 188 Disable broadcast and multicast traffic Check this box to prevent br oadcast and multicast traffic forwarding to all W_VLAN. H H o o w w c c a a n n y y o o u u ( ( w w i i r r e e l l e e s s s s c c l l i i e e n n t t ) ) a a c c c c e e s s s s i i n n t t o o I I n n t t e e r r n n e e t t ? ? After finishi[...]

Vigor2910 Series User’s Guide 189 5. You can go to Diagnostics>>Wireless VLAN Online Station Table for viewing the connection status whenever you want. 3 3 . . 1 1 4 4 . . 3 3 V V L L A A N N C C r r o o s s s s S S e e t t u u p p This function allows the router to integr ate VLAN and W_VLAN for managing different computers (notebooks). Se[...]

Vigor2910 Series User’s Guide 190 The VLAN >> VALN Cross Setup allows y ou to set a communication bridge between computers in Wireless VLAN and wired VLAN. To achieve the intention of the above illustration, simply check the box under VLAN0 on the line of W_VLAN0. Enable Check this box to invoke VLAN Cross Setup function. VLAN0-3 It represe[...]

Vigor2910 Series User’s Guide 191 3 3 . . 1 1 4 4 . . 4 4 W W i i r r e e l l e e s s s s R R a a t t e e C C o o n n t t r r o o l l Rate Control manages the transmission rate of data in and out throu gh the router. You can also manage the in/out rate of each wireless VLAN. Go to VLAN menu and select Wireless Rate Control . The following page wi[...]

Vigor2910 Series User’s Guide 192 3 3 . . 1 1 5 5 U U S S B B A A p p p p l l i i c c a a t t i i o o n n USB diskette can be regarded as an FTP server. By way of Vigor router, clients on LAN can access, write and read data stored in USB diskette. After setting the configuration in USB Application , you can type the IP address of the Vigor router[...]

Vigor2910 Series User’s Guide 193 3 3 . . 1 1 5 5 . . 2 2 F F T T P P U U s s e e r r M M a a n n a a g g e e m m e e n n t t This page allows you to set profiles for FTP users. Any user who wants to access into the USB diskette must type the same username a nd password configured in this page. Before adding or modifying settings in this page, pl[...]

Vigor2910 Series User’s Guide 194 password specified here for accessing into USB storage diskette. Confirm Password Type the password again to make confirmation. Home Folder It determines the range for the client to access into. The user can enter a director y name in this field. Then, after clicking OK, the router will create th e specific/new f[...]

Vigor2910 Series User’s Guide 195 IP Address It display s the IP address of the user’ s host which connecting to the FTP server. When you insert USB diskette into the Vigor router, the system will start to find out such device within several seconds. Once the USB diskette has been found, the connection status will display “ Disk Connected ”[...]

Vigor2910 Series User’s Guide 196 3 3 . . 1 1 6 6 . . 1 1 S S y y s s t t e e m m S S t t a a t t u u s s The System Status provides basic network settings of Vigor router. It includes L AN and WAN interface information. Also, you could ge t the current running firmware version or firmware related information from this presentation. Model Name Di[...]

Vigor2910 Series User’s Guide 197 3 3 . . 1 1 6 6 . . 2 2 T T R R - - 0 0 6 6 9 9 S S e e t t t t i i n n g g Vigor router with TR-069 is available for matching with VigorACS server. Such page provides VigorACS and CPE settings under TR -069 protocol. All the settings configured here is for CPE to be controlled and manage d with VigorACS server. [...]

Vigor2910 Series User’s Guide 198 ACS Server for authentication. For example, if you want to use such CPE with VigorACS, you can type as the following: Username : acs Password : password CPE Client It is not necessary for you to type them. Such information is useful for Auto Configuration Server. Enable/Disable – Sometimes, port conflict might [...]

Vigor2910 Series User’s Guide 199 New Password Type in new password in this filed. Confirm New Password Type in the new password again. When you click OK, the login window w ill appear. Please use the new password to access into the web configurator again. 3 3 . . 1 1 6 6 . . 4 4 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k[...]

Vigor2910 Series User’s Guide 200 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for dem onstrating examples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available. Note: Backup for Certif[...]

Vigor2910 Series User’s Guide 201 3 3 . . 1 1 6 6 . . 5 5 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow de bug equipments. Enable Click “ Enable ” to activate this function. Router Nam[...]

Vigor2910 Series User’s Guide 202 3. From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information , select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router.[...]

Vigor2910 Series User’s Guide 203 3 3 . . 1 1 6 6 . . 6 6 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as ro[...]

Vigor2910 Series User’s Guide 204 3 3 . . 1 1 6 6 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session. The default value is [...]

Vigor2910 Series User’s Guide 205 Get Community Set the name for getting community by typing a prope r character. The default setting is public. Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain hos[...]

Vigor2910 Series User’s Guide 206 3 3 . . 1 1 6 6 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this ex[...]

Vigor2910 Series User’s Guide 207 3 3 . . 1 1 7 7 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 7 7 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial-ou[...]

Vigor2910 Series User’s Guide 208 3 3 . . 1 1 7 7 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Refresh Click it to reload the page. 3 3 . . 1 1 7 7 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content [...]

Vigor2910 Series User’s Guide 209 3 3 . . 1 1 7 7 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Index It displays the connection ite[...]

Vigor2910 Series User’s Guide 210 Peer IP:Port It indicates the destination IP address and port of remote host. Interface It indicates the interface of the WAN connection. Refresh Click it to reload the page. 3 3 . . 1 1 7 7 . . 6 6 W W i i r r e e l l e e s s s s V V L L A A N N O O n n l l i i n n e e S S t t a a t t i i o o n n T T a a b b l l[...]

Vigor2910 Series User’s Guide 211 3 3 . . 1 1 7 7 . . 7 7 W W e e b b A A u u t t h h e e n n t t i i c c a a t t i i o o n n T T a a b b l l e e This page displays the IP address, UserName and Login Time for the users who passing the web authentication from this router. 3 3 . . 1 1 7 7 . . 8 8 D D a a t t a a F F l l o o w w M M o o n n i i t t [...]

Vigor2910 Series User’s Guide 212 Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh th is page manually. Index Display the number of the data flow. IP Address [...]

Vigor2910 Series User’s Guide 213 Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column. Current /Peak/Speed Current me a ns current transmission rate and receiving rate for WAN1/WAN. Peak means the highest peak value detected by the router in data transmission. Speed me[...]

Vigor2910 Series User’s Guide 214 The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of th[...]

Vigor2910 Series User’s Guide 215 3 3 . . 1 1 7 7 . . 1 1 0 0 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determ ined by the router automatically. Ping to[...]

Vigor2910 Series User’s Guide 216 Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Host/IP Address It indicates the IP address of the host. Run Click this button to start route tracing work. Clear Click this link to remove the result o[...]

Vigor2910 Series User’s Guide 217 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N t t o o L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d q q u u [...]

Vigor2910 Series User’s Guide 218 set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN to LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5.[...]

Vigor2910 Series User’s Guide 219 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s sele cted, [...]

Vigor2910 Series User’s Guide 220 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router [...]

Vigor2910 Series User’s Guide 221 1. Go to VPN and Remote Access and select Remote Access Cont rol to enable the necessary VPN service and click OK . 2. Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to[...]

Vigor2910 Series User’s Guide 222 If an IPSec-based service is selected, y ou should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ[...]

Vigor2910 Series User’s Guide 223 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets des tined to the remote network to Router[...]

Vigor2910 Series User’s Guide 224 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

Vigor2910 Series User’s Guide 225 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security[...]

Vigor2910 Series User’s Guide 226 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. Y[...]

Vigor2910 Series User’s Guide 227 3. In Step 2. Connect to VPN Server , click Insert button to add a new entry. If an IPSec-based service is selected as shown below, You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in V[...]

Vigor2910 Series User’s Guide 228 server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m [...]

Vigor2910 Series User’s Guide 229 3. Set Inbound/Outbound ba ndwidth. Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS perform ance. 4. Return to[...]

Vigor2910 Series User’s Guide 230 6. Return to previous page. Enter th e Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. 7. Click Setup link for W AN1. 8. Check Enable UDP Bandwidth Control on the bottom to prevent enorm ous UDP traffic of V oIP influent other application. Click OK . 9. [...]

Vigor2910 Series User’s Guide 231 Class Name of Index 3. In this index, he will set reserve bandwidth for 1 VPN tunnel. 10. Click edit to open a new window . 11. First, check the ACT box. Then click Edit of Local Address to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s subnet address. Leave other fields [...]

Vigor2910 Series User’s Guide 232 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.1 68.1.1/255.255.255.0. The built-in DHCP server is enabled so it [...]

Vigor2910 Series User’s Guide 233 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

Vigor2910 Series User’s Guide 234 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers. John?[...]

Vigor2910 Series User’s Guide 235 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: draytel 1 Registe[...]

Vigor2910 Series User’s Guide 236 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor routers respectively. The y can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling. Arn[...]

Vigor2910 Series User’s Guide 237 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The file RTSxxx.exe will be asked to copy onto your computer. Remember the place of storing the execution file. [...]

Vigor2910 Series User’s Guide 238 5. Double click on the router tool icon. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 8. Type in your router IP, usually 19[...]

Vigor2910 Series User’s Guide 239 10. Click Send . 11. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Go to Certificate Management and choose Local[...]

Vigor2910 Series User’s Guide 240 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. 4. Connect to CA server via web browser. Follo w the instruction to subm it the request. Below we [...]

Vigor2910 Series User’s Guide 241 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below. Then you have done the request and the ser ver[...]

Vigor2910 Series User’s Guide 242 and you will find the below window show ing “------BEGINE CERTIFICATE------.....” 6. You may review the detail informati on of the certificate by clicking View button.[...]

Vigor2910 Series User’s Guide 243 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA cert[...]

Vigor2910 Series User’s Guide 244 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refres[...]

Vigor2910 Series User’s Guide 245 4 4 . . 9 9 V V P P N N B B a a c c k k u u p p A A p p p p l l i i c c a a t t i i o o n n You can change, disable or delete VPN Backup profile(s). Yet, the relational web pages in LAN to LAN also will be changed slightly . Please refer to the following expaination. Change the name of VPN Backup profile(s) 1. Cl[...]

Vigor2910 Series User’s Guide 246 W W e e b b P P a a g g e e C C h h a a n n g g e e s s f f o o r r V V P P N N B B a a c c k k u u p p Corresponding web page (LAN to LAN) will be ch anged if VPN Backup is enabled. Refer to the following figures. Dial-in call direction and Idle Timeout will be dimmish and cannot be used. All the items in Allowe[...]

Vigor2910 Series User’s Guide 247 After adding a new VPN Backup profile, it will be listed in Backup Mode drop- down list for you to choose for dialing. Examples for VPN Backup Profile Here provides two situations that you can take advantages of VPN Backup profile mechanism. Example 1: A VPN Backup profile with member 1 (IPSec type) and Member 2([...]

Vigor2910 Series User’s Guide 248 However, if the connection is off-line, Rout er A will use Member 2 VPN tunnel (with L2TP over IPSec) instead to connect Router B right away. Example 2: Subsidiary in Asia can use vigor ro uter as VPN client. Every da y it should transmit ERP, Mail or order inform ation to headquarter in Europe. The Vigor router [...]

Vigor2910 Series User’s Guide 249 4 4 . . 1 1 0 0 E E R R D D M M e e c c h h a a n n i i s s m m f f o o r r V V P P N N B B a a c c k k u u p p To use ERD (Environment Recovery Detecti on) mechanism for VPN Backup, please follow the steps listed below: 1. Click Start >> Run and type Telnet 192.168.1.1 in the Open box as below. Note that t[...]

Vigor2910 Series User’s Guide 250 Request Background: Some of users think it is not really environment recovery detection to borrow VPN tunnels from branch es for connecting with the headquarters. The system should connect to headquarters automatically and that is called ERD. To set ERD AutoDrop mode ¾ To check current status of AutoDrop > vp[...]

Vigor2910 Series User’s Guide 251 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Che[...]

Vigor2910 Series User’s Guide 252 F F o o r r W W i i n n d d o o w w s s  The example is based on Windows XP. As to the examples for other operation systems, please refer to the si milar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s. 2. Right-click on Local Area Connectio[...]

Vigor2910 Series User’s Guide 253 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configure[...]

Vigor2910 Series User’s Guide 254 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router. The most impor[...]

Vigor2910 Series User’s Guide 255[...]

Vigor2910 Series User’s Guide 256 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly. F F o o r r P P P P P P o o E E U U s s e e r r s s 1. Check if the Enabl[...]

Vigor2910 Series User’s Guide 257 5 5 . . 5 5 P P r r o o b b l l e e m m s s f f o o r r 3 3 G G N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n When you have trouble in using 3G network transm ission, please check the following: C C h h e e c c k k i i f f U U S S B B L L E E D D l l i i g g h h t t s s o o n n o o r r o o f[...]

Vigor2910 Series User’s Guide 258 T T r r a a n n s s m m i i s s s s i i o o n n R R a a t t e e i i s s n n o o t t f f a a s s t t e e n n o o u u g g h h Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor2910. In addition, please refer to the manual of 3G USB Modem for LED S[...]

Vigor2910 Series User’s Guide 259 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly , please re lease the button. Then, the router will restar t with the default configuration. After restore th[...]