Draytek Vigor2930 manual

[...]

Vigor2930 Series User’s Guide ii Vigor2930 Series Dual-WAN Security Firewall User’s Guide Version: 2.0 Firmware Version: V3.3.0 Date: 22/10/2010 Copyright 2010 All rights reserve d. This publication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval syst em, or transl[...]

Vigor2930 Series User’s Guide iii Copyright Information Copyright Declarations Copyright 2010 All rights reserved. This pub lication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission f rom the copy right[...]

Vigor2930 Series User’s Guide iv European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town ship, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor2930 Ser ies Router DrayTek Corp. declares that Vigor2930 Series of ro uters are in compliance with the following essential requirements and other[...]

Vigor2930 Series User’s Guide v T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1 1.2[...]

Vigor2930 Series User’s Guide vi 3.3.3 Open Ports ............................................................................................................... ....... 60 3.3.4 Addres s Mappi ng .......................................................................................................... .. 61 3.4 Fire wall ........................[...]

Vigor2930 Series User’s Guide vii 3.12 IS DN ...................................................................................................................... ............ 193 3.12.1 Basic Concept ........................................................................................................... .. 193 3.12.2 Genera l Setti ngs .....[...]

Vigor2930 Series User’s Guide viii 4.5.1 Calling vi a SIP Sever .................................................................................................... 265 4.5.2 Peer-to- Peer Ca lling ..................................................................................................... 267 4.6 Upgrade Firmware for Y our Router ......[...]

igor2930 Series User’s Guide 1 1 P P r r e e f f a a c c e e Vigor2930 is a broadband rout er with dual-WAN interface. It provides policy-based load-balance, fail-over and BOD (Bandwidth on Demand), also it integrates IP layer QoS, NAT session/bandwidth management to help u sers control works well with large bandwidth. By adopting hardware-based [...]

Vigor2930 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please ge t acquainted with the LED indicators and connectors first. The displays of LED indicators and connectors for the routers are different slightly. The followin[...]

igor2930 Series User’s Guide 3 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 9 9 3 3 0 0 LED Status Explanation Blinking The router is powered on and running norm ally. ACT (Activity) Off The router is powe red off. On The DoS/DDoS function is active. DoS Blinking It will blink while deleting an attack . CSM On The profile of CSM (Conte[...]

Vigor2930 Series User’s Guide 4 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 9 9 3 3 0 0 n n LED Status Explanation Blinking The router is powere d on and running normall y. ACT (Activity) Off The router is powe red off. On The DoS/DDoS function is active. DoS Blinking It will blink while deleting an attack . CSM On The profile of CSM [...]

igor2930 Series User’s Guide 5 LAN (1-4) Connecters for local networked devices. PWR Connecter for a power adapter.. ON/OFF Power Switch.[...]

Vigor2930 Series User’s Guide 6 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 9 9 3 3 0 0 V V n n LED Status Explanation Blinking The router is powered on and running norm ally. ACT (Activity) Off The router is powe red off. On The DoS/DDoS function is active. DoS Blinking It will blink while deleting an attack . CSM On The profile of C[...]

igor2930 Series User’s Guide 7 LAN (1-4) Connecters for local networked devices. PWR Connecter for a power adapter. ON/OFF Power Switch.[...]

Vigor2930 Series User’s Guide 8 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 9 9 3 3 0 0 V V S S LED Status Explanation Blinking The router is powere d on and running no rmall y. ACT (Activity) Off The router is p owered of f. On The DoS/DDoS function is active. DoS Blinking It will blink while deleting an attack. CSM On The profile of[...]

igor2930 Series User’s Guide 9 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On The port is connected with 100 Mbps. LAN 1/2/3/ 4 Right LED (Green) Off The port is discon nected wit h 10Mbps. Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (A[...]

Vigor2930 Series User’s Guide 10 1 1 . . 2 2 . . 5 5 F F o o r r V V i i g g o o r r 2 2 9 9 3 3 0 0 V V S S n n LED Status Explanation Blinking The router is powere d on and running normall y. ACT (Activity) Off The router is powe red off. On The DoS/DDoS function is active. DoS Blinking It will blink while deleting an attack . CSM On The profil[...]

igor2930 Series User’s Guide 11 (Green) Off The port is discon nected wit h 10Mbps. On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On The port is connected with 100 Mbps. LAN 1/2/3/ 4 Right LED (Green) Off The port is discon nected wit h 10Mbps. Interface Description Factory Reset Press[...]

Vigor2930 Series User’s Guide 12 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router with Ethernet cable (RJ-45). The WAN1/WAN2 LED (Left or Rig[...]

igor2930 Series User’s Guide 13 1 1 . . 4 4 I I S S D D N N P P h h o o n n e e A A d d a a p p t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n Such information is provided for Vigor2930 S m odels (e.g., Vigor2930VS). ISDN S0 1 is always fixed to connect ISDN phone. However, ISDN S0 2 is configurable as ISDN line or ISDN phone. When t[...]

Vigor2930 Series User’s Guide 14 This page is left blank.[...]

igor2930 Series User’s Guide 15 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator and h[...]

Vigor2930 Series User’s Guide 16 Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type a new one in the field of New Password and retype it on the field of Retype N[...]

igor2930 Series User’s Guide 17 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After ty ping the password[...]

Vigor2930 Series User’s Guide 18 In the Quick Start Wizard , you can configure the router to access the Internet with different protocol/modes such as PPPoE , PPTP , L2TP , Static IP or DHCP . The router supports the DSL WAN interface for Internet access. 2 2 . . 2 2 . . 1 1 P P P P P P o o E E PPPoE stands for Point-to-Point Protocol over Ethern[...]

igor2930 Series User’s Guide 19 Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.[...]

Vigor2930 Series User’s Guide 20 2 2 . . 2 2 . . 2 2 P P P P T T P P / / L L 2 2 T T P P Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol w[...]

igor2930 Series User’s Guide 21 2 2 . . 2 2 . . 3 3 S S t t a a t t i i c c I I P P Click Static IP as the protocol. Type in all the inform ation that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the s[...]

Vigor2930 Series User’s Guide 22 2 2 . . 2 2 . . 4 4 D D H H C C P P Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this [...]

igor2930 Series User’s Guide 23 2 2 . . 3 3 S S e e r r v v i i c c e e A A c c t t i i v v a a t t i i o o n n W W i i z z a a r r d d Service Activation Wizard can guide you to set WCF (Web Content Feature) feature with a quick way. Note: There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>[...]

Vigor2930 Series User’s Guide 24 3. In the following page, you can activate the We b content filter service at the same tim e or individually. When you finish the selection, please click Next . In this case, Web Content Filter (BPjM) is selected. 4. Setting confirmation page will be displayed as follows, please click Next . 5. Wait for a moment t[...]

igor2930 Series User’s Guide 25 6. Now, the web page will display the service th at you have activated according to your selection(s). The valid time for the free trial of these services is one month. Later, if you need to extend the licen se valid time, you can also use the Service Activation Wizard again to reach your goal by clicking the radio[...]

Vigor2930 Series User’s Guide 26 2 2 . . 4 4 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE/PPTP as the protocol , you will find out a link of Dial PPPoE/PPPoA or Drop PPPoE/PPPoA in the Online St [...]

igor2930 Series User’s Guide 27 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface. [...]

Vigor2930 Series User’s Guide 28 Dial ISDN Allows you to dial ISDN connection. Drop B1/B2 Allows you to drop B1 or B2 connection. Note: The words in green mean that the WAN connection of that interface (WAN1/WAN2) is ready for accessing Interne t; the words in red mean that the WAN connection of that interface (WAN1/WAN2) is not ready for accessi[...]

igor2930 Series User’s Guide 29 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed inform[...]

Vigor2930 Series User’s Guide 30 Below shows the menu items for Internet Access. 3 3 . . 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This section will introduce some general settings of Internet and explain the connection modes for WAN1 and WAN2 in details. This router supports dual WAN function. It allows users to access Internet[...]

igor2930 Series User’s Guide 31 Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the best l[...]

Vigor2930 Series User’s Guide 32 3 3 . . 1 1 . . 3 3 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly. Ind[...]

igor2930 Series User’s Guide 33 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E To use PPPoE as the accessing protocol of the internet, please choose Internet Acce ss from WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown. PPPoE Client Mode Click Enable for activating this function. If yo[...]

Vigor2930 Series User’s Guide 34 Detection Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. MTU Mean max[...]

igor2930 Series User’s Guide 35 After finishing all the settings here, please click OK to activate them. D D e e t t a a i i l l s s P P a a g g e e f f o o r r S S t t a a t t i i c c o o r r D D y y n n a a m m i i c c I I P P For static IP mode, you usually receive a fixe d public IP address or a public subnet, nam ely multiple public IP addre[...]

Vigor2930 Series User’s Guide 36 PING to the IP - If you enable the PING function, please specify the IP address for the system to PING it for keeping alive. PING Interval - Enter the interval for the system to execute the PING operation. RIP Protocol Routing Information Protocol is abbreviated as RIP (RFC1058) specifying how routers exchange rou[...]

igor2930 Series User’s Guide 37 Subnet Mask : Type the subnet mask. Gateway IP Address : Type the gateway IP address. Default MAC Address : Click this radio button to use default MAC address for the router. Specify a MAC Address : Some Cable service providers specify a specific MAC address for access authentication. In such cases y ou need to cli[...]

Vigor2930 Series User’s Guide 38 ISDN Dial Backup Setup This setting is available for the routers supporting ISDN function only. Before utilizing the ISDN dial backup feature, you must create a dial backup profile first. Please click Internet Access Setup > Dialing to a Single ISP to enter the backup profile. None - Disable the backup function[...]

igor2930 Series User’s Guide 39 Default MAC Address – Click this radio button to use default MAC address for the router. Specify a MAC Address - Some Cable service providers specify a specific MAC address for access authentication. In such cases y ou need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. WAN[...]

Vigor2930 Series User’s Guide 40 Protocol Use the drop-down menu to change the protocol for t he WAN interface. WAN Use the drop-down menu to change the WAN interface. Src IP Start Display the IP address for the start of the source IP. Src IP End Display the IP address for the end of the source IP. Dest IP Start Display the IP address for the sta[...]

igor2930 Series User’s Guide 41 Binding WAN interface Choose the WAN interface (WAN1 or WAN2) for binding. You can check the box of Auto failover to other WAN to m ake a backup WAN connection if the selected WAN interface fails to connect to Internet. Src IP Start Type the source IP start for the specified WAN interface. Src IP End Type the sourc[...]

Vigor2930 Series User’s Guide 42 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router is[...]

igor2930 Series User’s Guide 43 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the ro[...]

Vigor2930 Series User’s Guide 44 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask T [...]

igor2930 Series User’s Guide 45 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.2 or greater , but smaller than 220.135.240. 254. IP Pool Counts: Enter the number of IP addresses [...]

Vigor2930 Series User’s Guide 46 of the router , which means the router is the default gateway . DHCP Se rver IP Address for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Interne[...]

igor2930 Series User’s Guide 47 Index The number (1 to 10) unde r Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i [...]

Vigor2930 Series User’s Guide 48 Note: There are two reasons that we have to appl y RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet (192. 168.1.0/24). The second is that those hosts on the internal private subnets (e x. 192.168.10.0/24) can access [...]

igor2930 Series User’s Guide 49 3 3 . . 2 2 . . 4 4 V V L L A A N N ( ( M M o o n n i i t t o o r r ) ) Virtual LAN function provides you a very conve nient way to ma nage hosts by grouping them based on the physical port. You can also manage the in/out rate of each port. LAN Port mirror can be applied for the users in LAN. Generally speaking, th[...]

Vigor2930 Series User’s Guide 50 2. After checking the box to enable VLAN func tion, you will check the table according to the needs as shown below. T o remove VLAN, uncheck the needed box and click OK to save the results. 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN t[...]

igor2930 Series User’s Guide 51 Enable Click this radio button to invoke this fu nction. However, IP/MAC which is not listed in IP Bind List also can connect to Internet. Disable Click this radio button to disable this function. All the settings on this page will be invalid. Strict Bind Click this radio button t o block the connection of the IP/M[...]

Vigor2930 Series User’s Guide 52 Note: Before you select Strict Bind , you have to bind one set of IP/MAC address for one PC. If not, no one of the PCs can access into In ternet. And the web configurator of the router might not be accessed. 3 3 . . 2 2 . . 6 6 W W e e b b A A u u t t h h e e n n t t i i c c a a t t i i o o n n The purpose of web [...]

igor2930 Series User’s Guide 53 Click Disable to disable the timeout feature. Welcome Message Such message will be displayed on the redirect page when you access into the URL that you want. Connection Status Display IP, username, login time, etc., of the users logging currently. H H o o w w t t o o u u s s e e W W e e b b A A u u t t h h e e n n [...]

Vigor2930 Series User’s Guide 54 3 3 . . 3 3 N N A A T T Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that one or more private IP a ddresses can be mapped into a single public one. Public IP address is usually assigned by your ISP, for which you may get charged. Private IP addresses are recognized [...]

igor2930 Series User’s Guide 55 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-m apping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection.[...]

Vigor2930 Series User’s Guide 56 Enable Check this box to enable su ch port redirection setting. Mode Two options (Single and Range) are provided here for you to choose. To set a range for the specific service, select Range . In Range mode, if the public port (s tart port and end port) and the starting IP of private IP had been entered, the syste[...]

igor2930 Series User’s Guide 57 Y ou then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. 3 3 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP addre[...]

Vigor2930 Series User’s Guide 58 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias in Internet Access>>PPPoE/PPPoA or Internet Access>>MPoA, y o[...]

igor2930 Series User’s Guide 59 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting.[...]

Vigor2930 Series User’s Guide 60 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application [...]

igor2930 Series User’s Guide 61 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that will be used for this entry. Local Computer Enter the private IP address of the local host or click Choose PC to select one. Choose PC Click this button and, su[...]

Vigor2930 Series User’s Guide 62 Protocol Display the protocol used for this address mapping. Public IP Display the public IP address se lected for this entry, e.g., 172.16.3.102. Private IP Display the private IP set for this address mapping, e.g., 192.168.1.10 Mask Display the subnet mask selected for this address mapping. Status Display the st[...]

igor2930 Series User’s Guide 63 specify some IP addresses in the IP Alias List of the Static/DHCP Configuration page first. If you di d not type in any IP address in the IP Alias List, the Public IP setting will be empty in this field. When you click Apply , a message will appear to inform you. Private IP Assign an IP address (e.g., 192. 168.1.10[...]

Vigor2930 Series User’s Guide 64 The following illustrations are flow charts e xplaining how router will treat incoming traffic and outgoing traffic respectively. S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the netw[...]

igor2930 Series User’s Guide 65 2. UDP flood attack 3. ICMP flood attack 4. TCP Flag scan 5. Trace route 6. IP options 7. Unknown pr otocol 8. Land attack 10. SYN f ragment 11. ICMP fra gment 12. Tear dro p attack 13. Fraggle attack 14. Ping of Death attack 15. TCP/UDP port scan Below shows the menu items for Firewall. 3 3 . . 4 4 . . 2 2 G G e e[...]

Vigor2930 Series User’s Guide 66 filter rules. APP Enforcement Select one of the APP Enforcement settings (created in CSM>> APP Enforcement Profile Filter ) for applying with this router . Please set at least one profile for choosing in CSM>> APP Enforcement Pr ofile web page first. For troubleshooting needs, you can specify to record[...]

igor2930 Series User’s Guide 67 Window size – It determines the size of TCP protocol (0~65535). The m o re the value is, the better the performance will be. However , if the network is not stable, small value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources. However , Queue time[...]

Vigor2930 Series User’s Guide 68 PCs with subnet “172.16.x.x” connected under V igor router will be protected by security settings enabled and configured on the web pages of V igor router . When the transparent mode has been checked, hackers from Internet do not sense the existence of vigor router , therefore they cannot attack the router . 3[...]

igor2930 Series User’s Guide 69 Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the button will open Edit Filter Rule web page. For the detailed information, refer to the following page. Active Enable or disable the filter rule. Comment Enter filter set comments/description. Maximum length is 23–character long. Move U[...]

Vigor2930 Series User’s Guide 70 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type. From the IP Group drop down list[...]

igor2930 Series User’s Guide 71 choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port - (=) – when the first and last value are the same, it indicates one port; when the first and last valu es are different, it indicates a range for the port and available f[...]

Vigor2930 Series User’s Guide 72 SysLog For troubleshooting needs you can specify the filter log and/or CSM log here. Check the corresponding box to enable the log function. Then, the filter log a nd/or CSM log will be shown on Draytek Syslog window . Advance Setting Click Edit to open the following window . However , it is strongly recommended t[...]

igor2930 Series User’s Guide 73 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is composed by 7 filter rules, which can be f[...]

Vigor2930 Series User’s Guide 74 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defense [...]

igor2930 Series User’s Guide 75 and 10 seconds, respectively. Enable PortScan detection Port Scan attacks the Vigor router by sending lots of packets to many ports in an attempt to find ignorant services would respond. Check the box to activate the Port Scan detection. Whenever detecting this malicious exploration behavior by monitoring the port-[...]

Vigor2930 Series User’s Guide 76 Block ICMP Fragment Check the box to activate the Block ICMP fragment function. Any ICMP packets with more fragment bit set are dropped. Block Unknown Protocol Check the box to activate the Block Unknown Protocol function. Individual IP packet has a protocol field in the datagram header to indicate the protocol ty[...]

igor2930 Series User’s Guide 77 3 3 . . 5 5 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/gr[...]

Vigor2930 Series User’s Guide 78 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address. If you choose LAN as the Interface here, and choose LAN as the di[...]

igor2930 Series User’s Guide 79 3 3 . . 5 5 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN o[...]

Vigor2930 Series User’s Guide 80 3 3 . . 5 5 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Name Type a name for this profile. Protocol Sp[...]

igor2930 Series User’s Guide 81 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first and last values are different, it indicates that all the ports except the range defined here are available for this service type. (>) – the port number greater than this value is availa[...]

Vigor2930 Series User’s Guide 82 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All the available IP objects will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box. 3 3 . . 5 5 . . 5 5 K K e e y y w w o o r r d d O O [...]

igor2930 Series User’s Guide 83 Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For example, type gambling as Contents. When you browse th e webp age, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. 3 3 . . 5 5 . . 6 6 K K e e [...]

Vigor2930 Series User’s Guide 84 Name Type a name for this group. Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects Click button to add the selected Keyword objects in this box. 3 3 [...]

igor2930 Series User’s Guide 85 Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. 3 3 . . 5 5 . . 8 8 I I M M O O b b j j e e c c t t You can define policy profiles for IM (Instan t Messenger) application. [...]

Vigor2930 Series User’s Guide 86 Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allo wed to access into the forbidden items. 3 3 . . 5 5 . . [...]

igor2930 Series User’s Guide 87 Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allo wed to access into the forbidden items. In the above figu[...]

Vigor2930 Series User’s Guide 88 3 3 . . 5 5 . . 1 1 0 0 P P r r o o t t o o c c o o l l O O b b j j e e c c t t This page allows you to set 32 profiles for applications in protocol communication. These profiles will be applied in CSM>> APP Enforcement Profile for filtering. Set to Factory Default Clear all profiles. Click the number under [...]

igor2930 Series User’s Guide 89 3 3 . . 5 5 . . 1 1 1 1 M M i i s s c c O O b b j j e e c c t t You can define policy profiles for Misc appli cation. The object pr ofile(s) configured here will be seen and adopted in CSM>>IM/P2P Profile page. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in det[...]

Vigor2930 Series User’s Guide 90 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allo wed to access into the forbidden items.[...]

igor2930 Series User’s Guide 91 3 3 . . 6 6 C C S S M M CSM is an abbreviation of Content Security Management which is used to control IM/P2P usage, filter the web content and URL conten t to reach a goal of security management. Note: The priority of URL Content Filter is higher than Web Conte nt Filter. 3 3 . . 6 6 . . 1 1 A A P P P P E E n n f [...]

Vigor2930 Series User’s Guide 92 Profile Name Type a name for the CSM profile. Each profile can contain three objects settings, IM Object, P2P Object and Misc Object. Such profile can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. 3 3 . . 6 6 . . 2 2 U U R R L L C [...]

igor2930 Series User’s Guide 93 You can set eight profiles as URL content filter. Simply click the index num ber under Profile to open the following web page. Profile Name Type the name for such profile. Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages that match with the condition[...]

Vigor2930 Series User’s Guide 94 matching with the conditions specified in URL Access Control and Web Feature below, such function can determine the priority for the actions executed. For this one, the router will process the packages with the conditions set below for URL first, then Web feature second. Either: Web Feature First –When all the p[...]

igor2930 Series User’s Guide 95 or a complete URL string. Multiple keywords within a frame are separated by space, comma, or semi colon. In addition, the maximal length of each frame is 32-character long. After specifying keywords, the Vigor router will d ecline the connection request to the website whose URL string matched to any user-defined ke[...]

Vigor2930 Series User’s Guide 96 previously for passing or blocking the file downloading. 3 3 . . 6 6 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via S[...]

igor2930 Series User’s Guide 97 Activate Click it to access into MyVigor for activating WCF service. Setup Query Server It is recommend for you to use th e default setting, auto-selected. You need to specify a server for categorize searching when you type URL in browser based on the web content filter profile. Setup Test Server It is recommend fo[...]

Vigor2930 Series User’s Guide 98 Profile Name Type a name for such profile. Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass w ill be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. White/Bla[...]

igor2930 Series User’s Guide 99 If the web pages do not match with the specified feature set here, they will be processed with the categories listed on the box below. Action Pass - allow accessing into the corr esponding webpage with the categories listed on the box below. Block - restrict accessing into the corresponding webpage with the categor[...]

Vigor2930 Series User’s Guide 100 To activate the function of limit session, simply click Enable and set the default session limit. Enable Click this button to activate the function of limit session. Disable Click this button to close the function of limit session. Default session limit Defines the default session number used for each computer in[...]

igor2930 Series User’s Guide 101 3 3 . . 7 7 . . 2 2 B B a a n n d d w w i i d d t t h h L L i i m m i i t t The downstream or upstream from FTP, HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs. Please use Limit Bandwidth to make the bandwidth usage more efficient. In the Bandwidth Manag[...]

Vigor2930 Series User’s Guide 102 Each/Shared Select Each to make each IP within the range of Start IP and End IP having the same speed defined in TX limit and RX limit fields; select Shared to make all the IPs within the range of Start IP and End IP share the speed defined in TX limit and RX limit fields. TX limit Define the limitation for the s[...]

igor2930 Series User’s Guide 103 In a QoS-enabled network, or Differentiated Service (DiffServ or DS) framework, a DS domain owner should sign a Service License Agreement (SLA) with other DS domain owners to define the service level provided to ward traffic from different domains. Then each DS node in these domains will perform the priority treat[...]

Vigor2930 Series User’s Guide 104 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK , then click Setu[...]

igor2930 Series User’s Guide 105 check this box to push ACK of upload faster to speed the network traffic. Limited_bandwidth Ratio The ratio typed here is reserved for limited bandwidth of UDP application. Online Statistics Display an online statistics for quality of service for your reference. This link will be seen only if you click OK in WAN1/[...]

Vigor2930 Series User’s Guide 106 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit button to set the remote IP address (on LAN/WAN) for the rule. Edit It allows you to edit s[...]

igor2930 Series User’s Guide 107 Service Type It determines the service type of the data for processing with QoS control. It can also be edited. You can choose the predefined service type from the Service Type drop down list. Those types are predefined in factory. Simply choose the one that you want for using by current QoS. By the way, you can s[...]

Vigor2930 Series User’s Guide 108 For adding a new service type, click Add to open the following pag e. Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range as the Type . If you select Range, you have to type in the starting port numbe[...]

igor2930 Series User’s Guide 109 3 3 . . 8 8 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 8 8 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address assigned to y[...]

Vigor2930 Series User’s Guide 110 Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server. 3. Select Index number 1 to add an account for the router. Check Enable Dynamic DNS Account , and choose correct Service Provider: dyndns.org, type the regi[...]

igor2930 Series User’s Guide 111 3 3 . . 8 8 . . 2 2 S S c c h h e e d d u u l l e e The Vigor router has a built-in real time clock which can update itself manually or automatically by means of Network Time Protocols (NTP). As a re sult, you can not only schedule the router to dialup to the Internet at a specified time, but also restrict Interne[...]

Vigor2930 Series User’s Guide 112 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply durin[...]

igor2930 Series User’s Guide 113 The built-in RADIUS client feature enables the r outer to assist the remote dial-in user or a wireless station and the RADIUS server in performing mutual authentication. It enables centralized remote access authentication for network management. Enable Check to enable RADIUS client feature Server IP Address Enter [...]

Vigor2930 Series User’s Guide 114 3 3 . . 8 8 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT router[...]

igor2930 Series User’s Guide 115 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your P C may cause the UPnP function not working properly. This is because these applicati ons will block the accessing ability of some network ports. Security Considerations Activating [...]

Vigor2930 Series User’s Guide 116 Wake by Two types provide for you to wake up the binded IP. If you choose Wake by MAC Address, you have to type the correct MAC address of the host in MAC Address boxes. If you choose Wake by IP Address, you have to choose the correct IP address. IP Address The IP addresses that have been configured in Firewall&g[...]

igor2930 Series User’s Guide 117 3 3 . . 9 9 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet. In short, by VPN technology, you can send data between two computers across a shared [...]

Vigor2930 Series User’s Guide 118 Please choose a LAN-to-LAN Profile There are 32 VPN profiles for users to set. When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to[...]

igor2930 Series User’s Guide 119 the choices for the client profile, please click Next . You will see different configurations based on the selection(s) you made. z When you choose PPTP (None Encryption) or PPTP (Encryption) , you will see the following graphic: z When you choose IPSec , you will see the following graphic:[...]

Vigor2930 Series User’s Guide 120 z When you choose L2TP , you will see the following graphic: z When you choose L2TP over IPSec (Nice to Have/Must), you will see the following graphic:[...]

igor2930 Series User’s Guide 121 Profile Name Type a name for such profile. The length of the file is limited to 10 characters. VPN Dial-Out Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First / WAN2 First / - While connecting, the router will use WAN1/WAN2 as the [...]

Vigor2930 Series User’s Guide 122 connection. Remote Network Mask Please type the network mask (according to the real location of the remote host) for building VPN connection. After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed [...]

igor2930 Series User’s Guide 123 3 3 . . 9 9 . . 2 2 V V P P N N S S e e r r v v e e r r W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connec tion (from client to server) step by step. VPN Server Mode Selection Choose the direction for the[...]

Vigor2930 Series User’s Guide 124 Please choose a Dial-in User Accounts This item is available when you choose Remote Dial-in User (Teleworker) as VPN server mode. There are 32 VPN tunnels for users to set. Allowed Dial-in Type This item is available after you choose any one of dial-in user account profiles. Next, you have to select suitable dial[...]

igor2930 Series User’s Guide 125 After making the choices for the server profile, please click Next . You will see different configurations based on the selection you made . Here we take the example of choosing Remote-Dial-in User as the VPN Server Mode . z When you check PPTP/L2TP with IPSec Policy (None) , you will see the following graphic: z [...]

Vigor2930 Series User’s Guide 126 z When you check IPSec , you will see the following graphic: Profile Name Type a name for such profile. The length of the file is limited to 10 characters. User Name This field is used to auth enticate for connection when you select PPTP or L2TP with or without IPSec policy above. Password This field is used to a[...]

igor2930 Series User’s Guide 127 After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on t he page and click Finish to execute the next action. Go to the VPN Connection Management Click this radio button to access VPN and Remote [...]

Vigor2930 Series User’s Guide 128 The Vigor router will not accept the ISDN dial-in connection if the box of Enable ISDN Dial-in is not checked. 3 3 . . 9 9 . . 4 4 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Dial-In PPP Authentication P[...]

igor2930 Series User’s Guide 129 Start IP Address Enter a start IP address for the dial-in PPP connection. You should choose an IP address from the local private network. For example, if the local private network is 192.168.1.0/2 55.255.255.0, y ou could choose 192.168.1.200 as the Start IP Address. But, you have to notice that the first two IP a[...]

Vigor2930 Series User’s Guide 130 Method (LAN-to-LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel. Certificate for Dial-in – Choose the one you need. Pre-Shared Key - Currently only suppor t Pre-Shared Key authentication. Pre-Shared Key- Specify a key for IKE authentication Confirm Pr[...]

igor2930 Series User’s Guide 131 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can be IP Address, Domain, or E-mail Address . The box under the[...]

Vigor2930 Series User’s Guide 132 3 3 . . 9 9 . . 7 7 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection. You may set parameters including specified connection peer ID, con[...]

igor2930 Series User’s Guide 133 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback function be[...]

Vigor2930 Series User’s Guide 134 becomes one pure L2TP connection. Must - Specify the IPSec policy to be definitely applied on the L2TP connection. SSL Tunnel It allows the remote dial-in user to make an SSL VPN Tunnel connection through Internet, suitable for the application through network accessing (e.g., PPTP/L2TP/IPSec) If you check this bo[...]

igor2930 Series User’s Guide 135 the router. Block – This is default setting. Click this button to let multicast packets be blocked by the router. SSL VPN Set SSL Web Proxy - It allows the remote dial-in user to access internal web over SSL VPN, suitable for the application through web only (e.g., HTTP). Click SSL VPN>> SSL Web Proxy to s[...]

Vigor2930 Series User’s Guide 136 PIN Code – Type the code for authentication (e.g, 1234). Secret – Use the 32 digit-secret number generated by mOTP in the mobile phone (e.g., e759bb6f0e94 c7ab4fe6). IKE Authentication Method This group of fields is applicable for IPSec Tunnels and L2TP with IPSec Policy when you specify the IP address of the[...]

igor2930 Series User’s Guide 137 3 3 . . 9 9 . . 8 8 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including sp ecified connection direction (dial-in or dial-out), connection peer ID, connection type (ISDN connection, VPN connection - including PPTP[...]

Vigor2930 Series User’s Guide 138 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router wi[...]

igor2930 Series User’s Guide 139 router will use another WAN interface instead. WAN1 Only - While connecting, the router will use WAN1 as the only channel for VPN connection. WAN2 First - While connecting, the router will use WAN2 as the first channel for VPN connection. If WAN2 fails, the router will use another WAN interface instead. WAN2 Only [...]

Vigor2930 Series User’s Guide 140 sending PING packets to the remote host, the Vigor router can know the true existence of this VPN connection and react accordingly. This is independent of DPD (dead peer detection). ISDN Build ISDN LAN-to-LAN connection to remote network. You should set up Link Type and identity like User Nam e and Password for t[...]

igor2930 Series User’s Guide 141 from below: DES without Authentication -Use DES encryption algorithm and not apply any authentication scheme. DES with Authentication- Use DES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. 3DES without Authentication -Use triple DES encryption algorithm and not apply any authentication sche[...]

Vigor2930 Series User’s Guide 142 You may specify a value in between 600 and 86400 seconds. Perfect Forward Secret (PFS)- The IKE Phase 1 key will be reused to avoid the computation complexity in phase 2. The default value is inactive this function. Local ID- In Aggressive mode, Local ID is on behalf of the IP address while identity authenticatin[...]

igor2930 Series User’s Guide 143 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for S model only. In addition, you can further set up Callback function below. PPTP Allow the [...]

Vigor2930 Series User’s Guide 144 alone or with IPSec. Select from below: None - Do not apply the IPSec policy. Accordingly, the VPN connection employed the L2TP without IPSec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection[...]

igor2930 Series User’s Guide 145 model only). The remote user will be charged the connection fee by the telecom. Check to enable Callback function -Enables the callback function. Callback number -The option is for extra security. Once enabled, the router will ONLY call back to the specified Callback Number. Callback budget - By default, the callb[...]

Vigor2930 Series User’s Guide 146 modify the settings if required. More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. RIP Direction - The option specifies the directi[...]

igor2930 Series User’s Guide 147 ¾ The web page is simple to understand and easy to configure ¾ Filly compliant with VPN Server LAN Sit Single/Multi Network ¾ Mail Alert support, please refer to System Maintenance >> SysLog / Mail Alert for detailed configuration ¾ Syslog support, please refer to System Maintenance >> SysLog / Mai[...]

Vigor2930 Series User’s Guide 148 Backup Profile List Set to Factory Default - Click to clear all VPN TRUNK-VPN Backup mechanism profile. No – The order of VPN TRUNK-VPN Backup mechanism profile. Status (on Backup Profile field) - “v” means such profile is enabled; “x” means such profile is disabled. Name (on Backup Profile field) - Dis[...]

igor2930 Series User’s Guide 149 profile selected from the Member2 drop down list below. Advanced – This button is only available when there is one profile (or more) created in this page. Detailed information for this dialog, see later section - Advanced Load Balance and Backup . Load Balance Profile List Set to Factory Default - Click to clear[...]

Vigor2930 Series User’s Guide 150 Detailed information for this dialog, see later section - Advanced Load Balance and Backup . General Setup Status - After choosing one of the profile listed above, please click Enable to activate this profile. If you click Disable , the selected or current used VP N TRUNK-Backup/Load Balance mechanism profile wil[...]

igor2930 Series User’s Guide 151 LAN-to-LAN will be displayed in blue. Edit Click this button to save the changes to the Status (Enable or Disable), profile name, member1 or member2. Delete Click this button to delete the selected VPN TRUNK profile. The corresponding members (LAN-to-LAN profiles) grouped in the deleted VPN TRUNK profile will be r[...]

Vigor2930 Series User’s Guide 152 4. Take a look for LAN-to-LAN profiles. Index 1 is chosen as Member1; index 2 is chosen as Member2. For such reason, LAN-to-LAN profiles of 1 and 2 will be expressed in red to indicate that they are fixed. If you delete the VPN TRUNK – VPN Backup/Load Balance mechanism profile, the selected LAN-to-LAN profiles [...]

igor2930 Series User’s Guide 153 A A d d v v a a n n c c e e d d L L o o a a d d B B a a l l a a n n c c e e a a n n d d B B a a c c k k u u p p After setting profiles for load balance, you can choose any one of them and click Advance for more detailed configuration. The window s for advanced load balance and backup are different. Refer to the fo[...]

Vigor2930 Series User’s Guide 154 considered by DrayOS system, the system can adjust dynamically for bandwidth of both VPN tunnels. In m o st cases, VPN Tunnel with high rate will use the WAN interface which has more available bandwidth. VPN Load Balance – Binding Tunnel Policy Below shows the algorithm for Load Balance. Create – Click this r[...]

igor2930 Series User’s Guide 155 match with the settings specifie d here and IGMP Service Port also fits the number here, such binding tunnel table can be established. Other means when the source IP, destination IP, destination port and fragment conditions match with the settings specified here with different TCP Service Port/UDP Service Port/ICM[...]

Vigor2930 Series User’s Guide 156 Advanced Backup Profile Name List the backup profile name. ERD Mode ERD means “Environment Recovers Detection”. Normal – choose this mode to make all dial-out VPN TRUNK backup profiles being activated alternatively. Recover Timer – choose this mode to detect VPN connection periodically and type the value [...]

igor2930 Series User’s Guide 157 backup function. Backup Mode This filed displays the profile name saved in VPN TRUNK Management (with Index number and VPN Server IP address). The VPN connection built by Backup Mode supports VPN backup function. Dial Click this button to execute dial out fun ction. Refresh Seconds Choose the time for refresh the [...]

Vigor2930 Series User’s Guide 158 3 3 . . 1 1 0 0 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc., and the digital signature of th[...]

igor2930 Series User’s Guide 159 Note: Please be noted that “Common Name” must be configured with rotuer’s WAN IP or domain name. After clicking GENERATE , the generated information w ill be displayed on the window below: IMPORT Vigor router allows you to generate a certificate request and submit it the CA server, then import it as “Local[...]

Vigor2930 Series User’s Guide 160 Upload Local Certificate It allows users to import the certificate which is generated by vigor router and signed by CA server. If you have done well in certificate generation, the Status of the certificate will be shown as “ OK ”. Upload PKCS12 Certificate It allows users to import the certificate whose exten[...]

igor2930 Series User’s Guide 161 REFRESH Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. Note: You have to copy the certificate request information from above window. Next, access your CA server and enter the page of certificate request, copy the information [...]

Vigor2930 Series User’s Guide 162 3 3 . . 1 1 0 0 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. [...]

igor2930 Series User’s Guide 163 3 3 . . 1 1 0 0 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them . If you want to set encryption password for these certificates, please typ[...]

Vigor2930 Series User’s Guide 164 registration messages to validate. Then, bo th parties’ SIP proxies will forward the sequence of messages to caller to establish the session . If you both register to the same SIP Registrar, then it will be illustrated as below: The major benefit of this mode is that you don ’t have to memorize your friend’[...]

igor2930 Series User’s Guide 165 P P h h o o n n e e B B o o o o k k In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make calls quickly and easily by using “speed-dial” Phone Number . There are total 60 index entries in the phonebook for you to store all your friends and family mem bers’ SIP addres[...]

Vigor2930 Series User’s Guide 166 Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots of SIP URL Address. SIP URL Enter your friend’s SIP Address This page will differ for different models. Below is a sample page obtained from Vigor 2930[...]

igor2930 Series User’s Guide 167 Enable Check this box to invoke this setting. Prefix Number The phone number set here is used to add, strip, or replace the OP number. Mode None - No action. Add - When you choose this mode, the OP number will be added with the prefix number for calling out through the specific VoIP interface. Strip - When you cho[...]

Vigor2930 Series User’s Guide 168 SIP server. OP Number The front number you type here is the first part of the account number that you want to execute special function (according to the chosen mode) by using the prefix num ber. Min Len Set the minimal length of the dial number for appl y ing the prefix number settings. Take the above picture (Pr[...]

igor2930 Series User’s Guide 169 Enable Click this to enable this entry. Call Direction Determine the direction for the phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/URL or number. Specific URI/URL or Specific Number - This field [...]

Vigor2930 Series User’s Guide 170 For Block Unknown Domain – this function can block incoming calls from unrecognized domain that is not specified in SIP accounts. Such controlling also can be done based on preconfigured schedules. For Block IP Address – this function can block incoming calls coming from IP address. Such controlling also can [...]

igor2930 Series User’s Guide 171 Last Call Return [Miss] Sometimes, people might miss some phone calls. Please dial number typed in this field to know where the last phone call comes from and call back to that one. Last Call Return [In] You have finished an incoming phone call, however you want to call back again for some reason. Please dial numb[...]

Vigor2930 Series User’s Guide 172 Call Waiting [Act] Dial the number typed in this field to make all the incoming calls waiting for your answer. Call Waiting [Deact] Dial the number typed in this field to release this function. Block Anonymous[Act] Dial the number typed in this field to block all the incoming calls with unknown ID. Block Anonymou[...]

igor2930 Series User’s Guide 173[...]

Vigor2930 Series User’s Guide 174 Index Click this link to access into next page for setting SIP account. Profile Display the profile name of the account. Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the SIP proxy server. Account Name Display the account name of SIP[...]

igor2930 Series User’s Guide 175 Register via If you want to make VoIP call without register personal information, please choose None and check the box to achieve the goal. Some SIP server allows user to use VoIP function without registering. For such server, please check the box of Call without registration . Choosing Auto is recommended. The sy[...]

Vigor2930 Series User’s Guide 176 Ring Port Set Phone1, Phone2, ISDN1-S0 or ISDN -TE as the default ring port for this SIP account. If you choose Phone1, Phone2 or ISDN1-S0, the ISDN2-TE selection will be dimmed, vice versa. There are ten internal lines with numbers (30 – 39) offered for ISDN-S0 . You can specify one of them or choose Any as ri[...]

igor2930 Series User’s Guide 177 If you want to enable function of ISDN On-Net/Off-Net, you have to choose ISDN2-TE. Call Feature – A brief description for call feature will be shown in this field for your reference. Codec – The default Codec setting for each port will be shown in this field for your reference. You can click the number below [...]

Vigor2930 Series User’s Guide 178 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically. Call Forward[...]

igor2930 Series User’s Guide 179 detailed configuration. Index (1-60) in Phone Book - Enter the index of phone book profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hi de the caller ID on the display panel of the phone set. Call Waiting Check this box to invoke this func[...]

Vigor2930 Series User’s Guide 180 Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It determines the default direction for the call route of the router. To ISDN (for VoIP) - The router is set by using ISDN call. To change ISDN call into VoIP call, please dial the character in this field for t[...]

igor2930 Series User’s Guide 181 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC Di[...]

Vigor2930 Series User’s Guide 182 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 1 1 - - S S 0 0 P P o o r r t t Click the number link of Index 3 (ISDN1-S0), you can access into the following page for configuring Phone settings. Hotline Check the box to enable it. Type in the SIP URL in the field for d[...]

igor2930 Series User’s Guide 183 abc@iptel.org) as the site for call forwarded. Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call. During the period, the one who dial in will listen bus y tone, yet the local user will not[...]

Vigor2930 Series User’s Guide 184 invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile names for the accounts as the default one for this phone setting. ISDN-S0 port can pick up multiple incoming calls simulta[...]

igor2930 Series User’s Guide 185 Region Select the proper region which you are located. The common settings of Caller ID Type , Dial tone , Ringing tone , Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, rin[...]

Vigor2930 Series User’s Guide 186 Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC Dial Tone Power Leve l - This setting i s used to adjust the loudness of the dial tone. The smaller the number is, the louder the di[...]

igor2930 Series User’s Guide 187 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 2 2 - - T T E E P P o o r r t t ( ( A A v v a a i i l l a a b b l l e e f f o o r r V V S S n n m m o o d d e e l l o o n n l l y y ) ) Vigor2930VSn allows users to switch the func tion of ISDN2 port between TE or S0 mode. [...]

Vigor2930 Series User’s Guide 188 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically. Call Forward[...]

igor2930 Series User’s Guide 189 profiles. Refer to section VoIP>>DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hi de the caller ID on the display panel of the phone set. Prefer Codec Select one of five codecs as the default for your VoIP calls. The codec used for each call will be negotiated wi[...]

Vigor2930 Series User’s Guide 190 configured. In addition, you can specify which port (both phone 1 and phone 2, phone 1 only or phone 2 onl y ) will ring. Loop Through to ISDN1-S0 Port – Choose this radio button to make all the calls controlled by ISDN line. In addition, you can press the Advanced button to configure tone settings, volume gain[...]

igor2930 Series User’s Guide 191 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC Di[...]

Vigor2930 Series User’s Guide 192 Payload Type (rfc2833) - Choose a nu mber from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. 3 3 . . 1 1 1 1 . . 4 4 S S t t a a t t u u s s From this page, you can find codec, connection and ot her important call status for each port. Refresh Seconds Specify the [...]

igor2930 Series User’s Guide 193 ALERTING - Indicates that a call is coming. ACTIVE- Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel. PeerID The present in-call or out-call peer ID (the format may be IP or Domain). Elapse The format is represented as hours:minutes:seconds. Tx Pkts Total [...]

Vigor2930 Series User’s Guide 194 3 3 . . 1 1 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s This web page allows you to enable ISDN function. ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local ISDN network, you should choose the correct country code. D-Ch[...]

igor2930 Series User’s Guide 195 provides ten fields for MSN numbers. Note that MSN service must be acquired from your local telecom operators. By default, MSN function is disabled. If you leave the fields blank, all incoming calls will be accepted without number matching. 1-10 fields – Fill in the portion that is di fferent with the own number[...]

Vigor2930 Series User’s Guide 196 A A p p p p l l i i c c a a t t i i o o n n E E x x a a m m p p l l e e You got ISDN numbers with 59 72720~5972729 from your ISP, and you tr y to connect ISDN-TE port to ISDN network. Please refer to the following configuration. Open ISDN>> General Setup and set as the following: When remote user calls you [...]

igor2930 Series User’s Guide 197 3 3 . . 1 1 2 2 . . 3 3 D D i i a a l l t t o o S S i i n n g g l l e e / / D D u u a a l l I I S S P P s s Select Dialing to a Single ISP if you access the Internet via a single ISP. ISP Access Setup ISP Name - Enter your ISP name such as Seednet, Hinet and so on. Dial Number - Enter the ISDN access number provid[...]

Vigor2930 Series User’s Guide 198 IP Address Assignment Method (IPCP) In most environments, you should not change these settings as most ISPs provide a dynamic IP address for the router when it connects to the ISP. If your ISP provides a fixed IP address, check Yes and enter the IP address in the field of Fixed IP Address . Select Dialing to Dual[...]

igor2930 Series User’s Guide 199 Primary ISP Setup ISP Name - Enter your ISP name. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP. IP Address Assignment Method (IPCP) for primary ISP setup In most environments, you should not c[...]

Vigor2930 Series User’s Guide 200 3 3 . . 1 1 2 2 . . 4 4 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router ( only for the ISDN m odels) be remotely activated, or be able to dial up to the ISP via the ISDN interface. Vigor router s provide this feature by allowing user to make a phone call to the router and the[...]

igor2930 Series User’s Guide 201 To remotely make the server to be available on the Internet, i.e. make the router in the head o ffice activating its Internet access either by dialing-up or starting broadband connection, users can make a regular phone call (the number is set in the Remote Activation field) to the router as signaling it for activa[...]

Vigor2930 Series User’s Guide 202 3 3 . . 1 1 3 3 W W i i r r e e l l e e s s s s L L A A N N This function is used for “n” models only. 3 3 . . 1 1 3 3 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed tremendous growth. Wireless technology now reaches or is cap[...]

igor2930 Series User’s Guide 203 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit ke y. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys. WPA (Wi-Fi Protected Access), the most domin ating [...]

Vigor2930 Series User’s Guide 204 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Check the box to enable wireless funct[...]

igor2930 Series User’s Guide 205 wireless LAN. Depending on the wireless utility, the user may only see the information except SSID or just cannot see any thing about Vigor wireless router while site surveying. The system allows y ou to set four sets of SSID for different usage. In default, the first set of SSID will be enabled. You can hide it f[...]

Vigor2930 Series User’s Guide 206 Note: * means the real transmission rate depends on the environment of the network. 3 3 . . 1 1 3 3 . . 3 3 S S e e c c u u r r i i t t y y This page allows you to set security with diffe rent modes for SSID 1, 2, 3 and 4 respectively. After configuring the correct settings, please click OK to save and invoke it.[...]

igor2930 Series User’s Guide 207 Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP- Accepts only WEP clients and the encryption key should be entered in WEP Key. WEP/802.1x Only - Accepts only WEP clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol.[...]

Vigor2930 Series User’s Guide 208 WPA2/802.1x Only- Accepts only WPA2 clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. Mixed (WPA+WPA2/802.1x only) - Accepts WPA and WPA2 clients simultaneously and the encryption key is obtained dynamically from RADIUS server with 802.1X proto col. WPA/PSK- Accepts o[...]

igor2930 Series User’s Guide 209 Policy Select to enable any one of the following policy. Activate MAC address filter- Allow to set MAC address list for accessing Access Point. PCs with MAC address not listed above cannot access AP. In addition, selected station with MAC address listed above can be isolated from LAN by checking Isolate the statio[...]

Vigor2930 Series User’s Guide 210 Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Cancel Give up the access control set up. OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 3 3 . . 1 1 3 3 . . 5 5 W W P P S S WPS (Wi-Fi Protected Setup) provides e[...]

igor2930 Series User’s Guide 211 vigor router. For WPS is supported in WPA-PSK or WPA2- PSK mode, if you do not choose such mode in Wireless LAN>>Security , yo u will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again. Below shows Wireless LAN>&g[...]

Vigor2930 Series User’s Guide 212 Authentication Mode Display current authentication mode of the router. Only WPA2/PSK and WPA/PSK support WPS. Configure via Push Button Click Start PBC to invoke Push-Button style WPS setup procedure. The router will wait for WPS requests from wireless clients about two minutes. The WLAN LED on the router will bl[...]

igor2930 Series User’s Guide 213 The application for the WDS-Repeater mode is depicted as below: The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be for warded to l[...]

Vigor2930 Series User’s Guide 214 Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Security There are three types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the follo[...]

igor2930 Series User’s Guide 215 encryption mode as WPA or WPA2 to establish your WDS system between AP and the router. Key - Type 8 ~ 63 ASCII characters or 64 hexadecimal digits leading by “0x”. Bridge If you choose Bridge as the connecting mode, please type in the peer MAC address in these fields. Four peer MAC addresses are allowed to be [...]

Vigor2930 Series User’s Guide 216 3 3 . . 1 1 3 3 . . 7 7 A A P P D D i i s s c c o o v v e e r r y y Vigor router can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know whic h channel is clean for usage. Also, it can be used to facilitate finding an AP for a WDS link. Notice that [...]

igor2930 Series User’s Guide 217 Refresh Click this button to refresh the status of station list. Add Click this button to add current selected MAC address into Access Contro l.[...]

Vigor2930 Series User’s Guide 218 3 3 . . 1 1 3 3 . . 9 9 R R a a t t e e C C o o n n t t r r o o l l This page allows you to contro l the upload and download rate of each wireless client (station) and SSID1-4. Please check the box of Enab le to invoke this setting. The range for the rate is between 100 ~ 100,000 kbps. SSID rate control controls [...]

igor2930 Series User’s Guide 219 Disable Click this button to close this function. Redirect to URL Any user who wants to access in to Internet through this router will be redirected to the URL specified here first. It is a useful method for the purpose of advertisement. For example, force the wireless user(s) in hotel to access into the web page [...]

Vigor2930 Series User’s Guide 220 Port Such port is set for SSL VPN server. It will not affect the HTTPS Port configuration set in System Maintenance>>Management . In general, the default setting is 443. Server Certificate When the client does not set any certificate, default certificate will be used for HTTPS and SSL VPN server. Choose any[...]

igor2930 Series User’s Guide 221 Name Type name of the profile. URL Type the address (function variati on or IP address) or path of the proxy server. Host IP Address If you type function variation as URL, you have to t ype corresponding IP address in this filed. Such field must match with URL setting. Access Method There are three modes for you t[...]

Vigor2930 Series User’s Guide 222 You can find out the link of Set SSL Web Proxy on the profile setting page. If you haven’t set any SSL Web Proxy Profile in SSL VPN>> SSL Web Proxy web page, there is no check box but a link appeared below. However, if you have set several SSL Web Proxy Profiles in SSL VPN>> SSL Web Proxy web page: [...]

igor2930 Series User’s Guide 223 3 3 . . 1 1 4 4 . . 4 4 O O n n l l i i n n e e U U s s e e r r S S t t a a t t u u s s If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access in to Draytek SSL VPN portal interface. Next, users can open SSL VPN>> Online Status to view log[...]

Vigor2930 Series User’s Guide 224 Below shows the menu items for System Maintenance. 3 3 . . 1 1 5 5 . . 1 1 S S y y s s t t e e m m S S t t a a t t u u s s The System Status provides basic network settings of Vigor router. It includes L AN and WAN interface information. Also, you could ge t the current running firmware version or firmware relate[...]

igor2930 Series User’s Guide 225 1 st Subnet Mask Display the subnet mask address of the LAN interface. DHCP Server Display the current status of DHCP server of the LAN interface. DNS Display the assigned IP address of the primary DNS. WAN1/WAN2 --- Link Status Display the connection status. MAC Address Display the MAC address of the WAN Interfac[...]

Vigor2930 Series User’s Guide 226 3 3 . . 1 1 5 5 . . 2 2 T T R R - - 0 0 6 6 9 9 S S e e t t t t i i n n g g Vigor router with TR-069 is available for matching with VigorACS server. Such page provides VigorACS and CPE settings under TR -069 protocol. All the settings configured here is for CPE to be controlled and manage d with VigorACS server. [...]

igor2930 Series User’s Guide 227 Username/Password - Type userna me and password for ACS Server for authentication. For example, if you want to use such CPE with VigorACS, you can type as the following: Username : acs Password : password CPE Client It is not necessary for you to type them. Such information is useful for Auto Configuration Server.[...]

Vigor2930 Series User’s Guide 228 New Password Type in new password in this filed. Confirm Password Type in the new password again. When you click OK, the login window w ill appear. Please use the new password to access into the web configurator again. 3 3 . . 1 1 5 5 . . 4 4 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u[...]

igor2930 Series User’s Guide 229 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating examples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available. Note: Backup for Certific[...]

Vigor2930 Series User’s Guide 230 3 3 . . 1 1 5 5 . . 5 5 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow de bug equipments. Enable Click “ Enable ” to activate this function. Router Nam[...]

igor2930 Series User’s Guide 231 3. From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information , select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. 3 3 . . 1 1 5 5 . . 6 6 T T i i m m e e a a n n d d D D a a t t e e It allo[...]

Vigor2930 Series User’s Guide 232 Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as router’s system time. Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol. Time Protocol [...]

igor2930 Series User’s Guide 233 3 3 . . 1 1 5 5 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session. The default value is 506[...]

Vigor2930 Series User’s Guide 234 Get Community Set the name for getting community by typing a prope r character. The default setting is public. Set Community Set community b y typing a proper name . The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain h[...]

igor2930 Series User’s Guide 235 3 3 . . 1 1 5 5 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this exa[...]

Vigor2930 Series User’s Guide 236 Activate via Interface Choose WAN interface used by such device for activating Web Content Filter. Activate The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. Authentication Message As for authentication information of web filter , the process of a[...]

igor2930 Series User’s Guide 237 3 3 . . 1 1 6 6 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 6 6 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial-out[...]

Vigor2930 Series User’s Guide 238 3 3 . . 1 1 6 6 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Refresh Click it to reload the page. 3 3 . . 1 1 6 6 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content [...]

igor2930 Series User’s Guide 239 3 3 . . 1 1 6 6 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Index It displays the connection item[...]

Vigor2930 Series User’s Guide 240 #Pseudo Port It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address an d port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. 3 3 . . 1 1 6 6 . . 6 6 W W e e b b A A u u t t h h e [...]

igor2930 Series User’s Guide 241 Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh th is page manually. Index Display the number of the data flow. IP Address D[...]

Vigor2930 Series User’s Guide 242 minutes. The remaining time will be shown on the session column. Current /Peak/Speed Current me ans current transmission rate and receiving rate for WAN1/WAN. Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General . If you do not speci[...]

igor2930 Series User’s Guide 243 3 3 . . 1 1 6 6 . . 8 8 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth/WAN2 Bandwidth, Sessions, daily or w eekly for viewing different traffic graph. Click Refresh to renew the graph at any time. The following two figures displa[...]

Vigor2930 Series User’s Guide 244 3 3 . . 1 1 6 6 . . 9 9 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Ping to Use [...]

igor2930 Series User’s Guide 245 3 3 . . 1 1 6 6 . . 1 1 0 0 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run . The result of route trace will be shown on the screen[...]

Vigor2930 Series User’s Guide 246 This page is left blank.[...]

igor2930 Series User’s Guide 247 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d q[...]

Vigor2930 Series User’s Guide 248 parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively w[...]

igor2930 Series User’s Guide 249 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s selected, yo[...]

Vigor2930 Series User’s Guide 250 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router [...]

igor2930 Series User’s Guide 251 Settings in Router B in the remote office: 1. Go to VPN and Remote Access and select Remote Access Cont rol to enable the necessary VPN service and click OK . 2. Then, for usi ng PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as I[...]

Vigor2930 Series User’s Guide 252 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, y ou should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based ser[...]

igor2930 Series User’s Guide 253 If an IPSec-based service is selected, y ou may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify th[...]

Vigor2930 Series User’s Guide 254[...]

igor2930 Series User’s Guide 255 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that y[...]

Vigor2930 Series User’s Guide 256 3. Go to Remote Dial-In User . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security [...]

igor2930 Series User’s Guide 257 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel to Vigor router. For Win2000/XP, please[...]

Vigor2930 Series User’s Guide 258 3. In Step 2. Connect to VPN Server , click Insert button to ad d a new entry. If an IPSec-based service is selected as shown below, You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in [...]

igor2930 Series User’s Guide 259 server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p[...]

Vigor2930 Series User’s Guide 260 3. Set Inbound/Outbound ba ndwidth. Note: The rate of outbound/inbound m ust be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to se t the bandwidth value for inbound/outbound as 80% - 85% of ph ysical network speed provided by ISP to maximize the QoS performance. 4. Return [...]

igor2930 Series User’s Guide 261 6. Return to previous page. Enter th e Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. 7. Click Setup link for W AN1. 8. Check Enable UDP Band width Control on the bott o m to prevent enormous UDP traffic of V oIP influent ot her application. Click OK . 9[...]

Vigor2930 Series User’s Guide 262 Class Name of Index 3. In this index, he will set reserve bandwidth for 1 VPN tunnel. 10. Click Edit to open a new window . 11. First, check the ACT box. 12. Then click Edit of Local Address to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s subnet address. Leave other fie[...]

igor2930 Series User’s Guide 263 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.1 68.1.1/255.255.255.0. The built-in DHCP server is enabled so it a[...]

Vigor2930 Series User’s Guide 264 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

igor2930 Series User’s Guide 265 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers. John?[...]

Vigor2930 Series User’s Guide 266 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: draytel 1 Registe[...]

igor2930 Series User’s Guide 267 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respe ctively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling. Arn[...]

Vigor2930 Series User’s Guide 268 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The file RTSxxx.exe will be asked to copy onto your computer. Remember the place of storing the execution file. [...]

igor2930 Series User’s Guide 269 5. Double click on the router tool icon. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 8. Type in your router IP, usually 192[...]

Vigor2930 Series User’s Guide 270 10. Click Send . 11. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Go to Certificate Management and choose Local[...]

igor2930 Series User’s Guide 271 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. 4. Connect to C A server via web browser. Follo w the instruction to submit the request. Below we t[...]

Vigor2930 Series User’s Guide 272 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below. Then you have done the request and the ser ver[...]

igor2930 Series User’s Guide 273 and you will find the below window show ing “------BEGINE CERTIFICATE------.....” 6. You may review the detail informati on of the certificate by clicking View button.[...]

Vigor2930 Series User’s Guide 274 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA cert[...]

igor2930 Series User’s Guide 275 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh[...]

Vigor2930 Series User’s Guide 276 4 4 . . 9 9 C C r r e e a a t t i i n n g g a a n n A A c c c c o o u u n n t t f f o o r r M M y y V V i i g g o o r r The website of MyVigor (a server located on http://myvigor.draytek.com ) prov ides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web [...]

igor2930 Series User’s Guide 277 2. Click the Activate link. A login page for MyVigor web site will pop up autom atically . 3. Click the link of Create an account now . 4. Check to confirm that you accept the Agreement and click Accept .[...]

Vigor2930 Series User’s Guide 278 5. Type your personal information in this page and then click Continue . 6. Choose proper selection for your computer and click Continue .[...]

igor2930 Series User’s Guide 279 7. Now you have created an account successfully. Click START. 8. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify th e register [...]

Vigor2930 Series User’s Guide 280 10. When you see the following page, please type in the account and password (that y ou just created) in the fields of UserName and Password . 11. Now, click Login . Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 4 4 . . 9 9 . . 2 2 C C r r e[...]

igor2930 Series User’s Guide 281 2. Check to confirm that you accept the Agreement and click Accept . 3. Type your personal information in this page and then click Continue . 4. Choose proper selection for your computer and click Continue .[...]

Vigor2930 Series User’s Guide 282 5. Now you have created an account successfully. Click START. 6. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify th e register[...]

igor2930 Series User’s Guide 283 8. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login . Your account has been activated. You can access into M[...]

Vigor2930 Series User’s Guide 284 This page is left blank.[...]

igor2930 Series User’s Guide 285 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Chec[...]

Vigor2930 Series User’s Guide 286 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong network[...]

igor2930 Series User’s Guide 287 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O S S 1. Double click on the current used Mac OS on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configur[...]

Vigor2930 Series User’s Guide 288 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router. The most impor[...]

igor2930 Series User’s Guide 289 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly. Click Details Page of WAN1/WAN2 to review the settings that you configured[...]

Vigor2930 Series User’s Guide 290 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly , please release the button. Then, the router will restar t with the default configuration. After restore the[...]