Draytek Vigor 2820Vn manuel d'utilisation

Vigor2820 Series ADSL2/2+ Security Firewall User’s Guide Version: 2.1 Date: 2008/10/13[...]

Vigor2820 Series User’s Guide ii Copyright Information Copyright Declarations Copyright 2008 All rights reserved. This pub lication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stor ed in a retrieval system, or translated into any language withou t written permission from the copyright [...]

Vigor2820 Series User’s Guide iii European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou County, H sinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor2820 Ser ies Router DrayTek Corp. declares that Vigor2820 Series of ro uters are in compliance with the following essential requirements and other [...]

Vigor2820 Series User’s Guide iv T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1 1.[...]

Vigor2820 Series User’s Guide v 3.4 Fire wall ................................................................................................................... ............... 74 3.4.1 Basics for Fire wall...................................................................................................... ..... 74 3.4.2 Genera l Setup ........[...]

Vigor2820 Series User’s Guide vi 3.12.3 Dial to Si ngle/Dual ISPs.............................................................................................. 18 3 3.12.4 Call Control ............................................................................................................ ..... 187 3.13 Wirele ss LAN .........................[...]

Vigor2820 Series User’s Guide vii 5 T rouble Shoot ing ........................................................................................... 253 5.1 Checking If the Hardware S t atus Is OK or No t.................................................................... 253 5.2 Checking If the Network Connection Settings on Y our Computer Is OK o[...]

[...]

Vigor2820 Series User’s Guide 1 1 P P r r e e f f a a c c e e Vigor2820 series is an ADSL and broadband router with WAN interface. It provides policy-based load-balance, fail-over and BOD (B andwidth on Demand), also it integrates IP layer QoS, NAT session/bandwidth managem ent to help users control works well with large bandwidth. By adopting ha[...]

Vigor2820 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please ge t acquainted with the LED indicators and connectors first. The displays of LED indicators and connectors for the routers are different slightly. The followin[...]

Vigor2820 Series User’s Guide 3 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking The data is transmitting. CSM On The profi le of CSM (C ontent Sec[...]

Vigor2820 Series User’s Guide 4 Interface Description Factory Reset Restore the def ault settings. Us age: T urn on the router (ACT LED is blinking). Press the hole and keep fo r more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, release the button. Then the router will restart with the fa ctory default configurati[...]

Vigor2820 Series User’s Guide 5 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking The data is transmitting. CSM On The profi le of CSM (C ontent[...]

Vigor2820 Series User’s Guide 6 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection th rough WPS. Press "Wireless LAN ON/OFF/WPS" button once to enab le (WLAN LED on) or disa ble (WLAN LED off) wireless c onnection. Factory Re[...]

Vigor2820 Series User’s Guide 7 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking The data is transmitting. CSM On The profi le of CSM (C on[...]

Vigor2820 Series User’s Guide 8 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection th rough WPS. Press "Wireless LAN ON/OFF/WPS" button once to enab le (WLAN LED on) or disa ble (WLAN LED off) wireless c onnection. Factory Re[...]

Vigor2820 Series User’s Guide 9 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V S S LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking The data is transmitting. CSM On The profi le of CSM (C on[...]

Vigor2820 Series User’s Guide 10 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On The port is conn ected with 1000Mbps. LAN 1(Giga) Right LED (Green) Off The port is di sconnected wit h 10/100Mb ps. On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The d[...]

Vigor2820 Series User’s Guide 11 1 1 . . 2 2 . . 5 5 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V S S n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking The data is transmitting. CSM On The profi le of CSM [...]

Vigor2820 Series User’s Guide 12 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The data is transmitting. On The port is conn ected with 1000Mbps. LAN 1(Giga) Right LED (Green) Off The port is di sconnected wit h 10/100Mb ps. On The port is connected. Off The port is disconnected. Left LED (Green) Blinking The d[...]

Vigor2820 Series User’s Guide 13 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the ADSL interface to the external ADSL splitter with an ADSL line cable for all models. For Vigor2820Vn/VS/VSn, also connect L[...]

Vigor2820 Series User’s Guide 14 For the hardware connection, we take “n” model as an example. Caution : Each of the Phone ports can be connected to an analog phone onl y. Do not connect the phone ports to the telephone wall jack. Such connection might damage your router. 1 1 . . 4 4 I I S S D D N N P P h h o o n n e e A A d d a a p p t t e e[...]

Vigor2820 Series User’s Guide 15 1 1 . . 5 5 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The exam ple provided here is made based on Windows XP/2000. For Windows 98/SE, please visit [...]

Vigor2820 Series User’s Guide 16 3. Open File->Add a New Computer . A welcome dialog will appear. Please click Next . 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port . Click Next .[...]

Vigor2820 Series User’s Guide 17 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port nam e. Then, click Next . 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish .[...]

Vigor2820 Series User’s Guide 18 9. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. W hen you finish the selection, click Next . 10. For the final stage, you need to go back to Control Panel-> Printers and edit the property of the new p[...]

Vigor2820 Series User’s Guide 19 The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Note 1: Some printers with the fax/scanning or other additional fun ctions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to fi[...]

Vigor2820 Series User’s Guide 20 This page is left blank.[...]

Vigor2820 Series User’s Guide 21 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator and [...]

Vigor2820 Series User’s Guide 22 Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type New Password . Then click OK to continue. 6. Now, the password has been chang[...]

Vigor2820 Series User’s Guide 23 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After ty ping the passwor[...]

Vigor2820 Series User’s Guide 24 In the Quick Start Wizard , you can configure the router to access the Internet with different protocol/modes such as PPPoE/PPPoA , 1483 Bridged IP or 1483 Routed IP . The router supports the DSL WAN interface for Internet access. 2 2 . . 2 2 . . 1 1 P P P P P P o o E E / / P P P P P P o o A A PPPoE stands for Poi[...]

Vigor2820 Series User’s Guide 25 If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown: User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Click Next for viewing summary of such c[...]

Vigor2820 Series User’s Guide 26 2 2 . . 2 2 . . 2 2 1 1 4 4 8 8 3 3 B B r r i i d d g g e e d d I I P P Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the syste[...]

Vigor2820 Series User’s Guide 27 2 2 . . 2 2 . . 3 3 1 1 4 4 8 8 3 3 R R o o u u t t e e d d I I P P Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! wil[...]

Vigor2820 Series User’s Guide 28 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE/PPPoA as the protocol, you will find out a link of Dial PPPoE or Drop PPPoE in the Online Status web page[...]

Vigor2820 Series User’s Guide 29 Online status for Static IP (for WAN1) Online status for DHCP (WAN1)[...]

Vigor2820 Series User’s Guide 30 Online status for ISDN enabled Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN in[...]

Vigor2820 Series User’s Guide 31 RX Pkts Displays the total number of received packets at the ISDN interface. RX Rate Displays the speed of received octets at the ISDN interface. Up Time Displays the total uptime of the interface. AOC Displays the charge information of the interface. Note: The words in green mean that the WAN connection of that i[...]

Vigor2820 Series User’s Guide 32 This page is left blank.[...]

Vigor2820 Series User’s Guide 33 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed infor[...]

Vigor2820 Series User’s Guide 34 3 3 . . 1 1 . . 2 2 N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n b b y y 3 3 G G U U S S B B M M o o d d e e m m For 3G mobile communication through Access Point is popular more and more, Vigor2820 adds the function of 3G network connection for such purpose. By connecting 3G USB Modem to the[...]

Vigor2820 Series User’s Guide 35 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface. Display Name Type the description for the WAN1/WAN2 interface. Physical Mode For WAN1, the physical connection is done through ADSL port; yet the physical connection for WAN2 is done through a[...]

Vigor2820 Series User’s Guide 36 determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the best load balance. Line Speed If your choose According to Line Speed as the Load Balance Mod[...]

Vigor2820 Series User’s Guide 37 3 3 . . 1 1 . . 4 4 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly. Ind[...]

Vigor2820 Series User’s Guide 38 Enable/Disable Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your IS P. Multi-PVC [...]

Vigor2820 Series User’s Guide 39 PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server. Thus,[...]

Vigor2820 Series User’s Guide 40 would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog. Fixed IP ?[...]

Vigor2820 Series User’s Guide 41 DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your IS P. Multi-PVC channel - The selections displayed here are determined by the page of Internet Access – Multi PVCs . Select M-PVCs Channel means no selection will be chosen. Encapsulating Type -[...]

Vigor2820 Series User’s Guide 42 None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. Always On - ?? This setting is available for n model only. WAN Connection Detection Such function allows you to veri fy whether network connection is alive [...]

Vigor2820 Series User’s Guide 43 Enable box. Then click OK to exit the dialog. IP Address – Type in the private IP address. Subnet Mask – Type in the subnet mask. Gateway IP Address – Type in gateway IP address. Default MAC Address Type in MAC address for the router. You can use Default MAC Address or spec ify another MAC address for your n[...]

Vigor2820 Series User’s Guide 44 Enable/Disable Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. ISP Access Setup Enter your allocated username , password and authentication parameters according to the inform ation provided by your [...]

Vigor2820 Series User’s Guide 45 value is set by telnet command. PPP/MP Setup PPP Authentication – Select PAP only or PAP or CHAP for PPP. Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action. This setting is active only when the Active on demand option for Active Mode is selected in [...]

Vigor2820 Series User’s Guide 46 For static IP mode, you usually receive a fixe d public IP address or a public subnet, nam ely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service provider will offer a public subnet. If you have a publ[...]

Vigor2820 Series User’s Guide 47 to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. Keep WAN Connection Normally, this function is designed for Dynamic IP environm ents because some ISPs will drop connections if there is no traffic within certain periods of t[...]

Vigor2820 Series User’s Guide 48 address for the router. Specify a MAC Address : Some Cable service providers specify a specific MAC address for access authentication. In such cases y ou need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. DNS Server IP Address Type in the primary IP address for the router i[...]

Vigor2820 Series User’s Guide 49 None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. This setting is available for n model only. PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for PPP . Idle Timeout - Set the timeout for break[...]

Vigor2820 Series User’s Guide 50 P P P P P P f f o o r r W W A A N N 2 2 Such mode is active only 3G USB Modem was chosen as the physical mode in General Setup. PPP Client Mode Click Enable to activate this mode for WAN2. SIM PIN code Type PIN code of the SIM card that will be used to access Internet. Modem Initial String Such value is used to in[...]

Vigor2820 Series User’s Guide 51 Enable Check this box to enable that channel. The channels that you enabled here will be shown in the Multi-PVC channel drop down list on the web page of Internet Access . Though you can enable eight channels in this page, yet only one channel can be chosen on the web page of Internet Access . VPI Type in the valu[...]

Vigor2820 Series User’s Guide 52 WAN link for Channel 3, 4, 5 are provided for router-borne applic ation such as TR069 and VoIP. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 3, 4 or 5 to configure your router. A A T T M M Q Q o o S S Such configu[...]

Vigor2820 Series User’s Guide 53 QoS Type Select a proper QoS type for the channel according to the information that your ISP provides. PCR It represents Peak Cell R ate. The default setting is “0”. SCR It represents Sustainable Cell Rate. T he value of SCR must be smaller than PCR. MBS It represents Maxim um Burst Size. The range of the valu[...]

Vigor2820 Series User’s Guide 54 IGMP. IGMP – It means that the PVC can accept packets of IGMP only. Add Tag To identify the usage of PVC, check this box to invoke this setting. And type the number for VLAN ID (number). Click Clear to remove all the configurations in th is page if you do not satisfy it. When you finish the configuration, please[...]

Vigor2820 Series User’s Guide 55 WAN Use the drop-down menu to change the WAN interface. Src IP Start Displays the IP address for the start of the source IP. Src IP End Displays the IP address for the end of the source IP. Dest IP Start Displays the IP address for the start of the destination IP. Dest IP End Displays the IP address for the end of[...]

Vigor2820 Series User’s Guide 56 Dest IP Start Type the destination IP start for the specified WAN interface. Dest IP End Type the destination IP end for the specified WAN interface. If this field is blank, it means that all the destination IPs will be passed through the WAN interface. Dest Port Start Type the destination port start for the desti[...]

Vigor2820 Series User’s Guide 57 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router is[...]

Vigor2820 Series User’s Guide 58 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the r[...]

Vigor2820 Series User’s Guide 59 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Addr ess T ype in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask T[...]

Vigor2820 Series User’s Guide 60 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.2 or greater , but smaller than 220.135.240. 254. IP Pool Counts: Enter the number of IP addresses[...]

Vigor2820 Series User’s Guide 61 DHCP Se rver IP Addr ess for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Internet host must have a unique IP address, also they may have a huma[...]

Vigor2820 Series User’s Guide 62 Index The number (1 to 10) unde r Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i[...]

Vigor2820 Series User’s Guide 63 Note: There are two reasons that we have to appl y RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet (192. 168.1.0/24). The second is that those hosts on the internal private subnets (e x. 192.168.10.0/24) can access [...]

Vigor2820 Series User’s Guide 64 3 3 . . 2 2 . . 4 4 V V L L A A N N Virtual LAN function provides you a very conve nient way to ma nage hosts by grouping them based on the physical port. You can also manage the in/out rate of each port. Go to LAN page and select VLAN . The following page will appear. Click Enable to invoke VLAN function. To add [...]

Vigor2820 Series User’s Guide 65 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthening control in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you m odified the binding IP or MAC addre[...]

Vigor2820 Series User’s Guide 66 Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List . Edit It allows you to edit and modify the selected IP address and MAC address that you create before. Remove You can remove any item listed in IP Bind List . Simply click and se[...]

Vigor2820 Series User’s Guide 67 is to forward all access request with public IP address from external users to the mapping private IP address/port of the server. The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-m [...]

Vigor2820 Series User’s Guide 68 Enable Check this box to enable su ch port redirection setting. Mode Two options (Single and Range) are provided here for you to choose. To set a range for the specific service, select Range . In Range mode, if the public port (s tart port and end port) and the starting IP of private IP had been entered, the syste[...]

Vigor2820 Series User’s Guide 69 conflict, such as 8080. Thi s can be set in the System Maintenance >>Management Setup . Y ou then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. 3 3 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can r[...]

Vigor2820 Series User’s Guide 70 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias for PPPoE/PPPoA or MPoA mode , you will find them in Aux. WAN IP for your[...]

Vigor2820 Series User’s Guide 71 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting.[...]

Vigor2820 Series User’s Guide 72 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application [...]

Vigor2820 Series User’s Guide 73 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that will be used for this entry. Local Computer Enter the private IP address of the local host or click Choose PC to select one. Choose PC Click this button and, s[...]

Vigor2820 Series User’s Guide 74 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor[...]

Vigor2820 Series User’s Guide 75 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a p acket based on the information in its header, stateful inspec[...]

Vigor2820 Series User’s Guide 76 3 3 . . 4 4 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p General Setup allows you to adjust setti ngs of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter . Under some circumstance, your filter set can be linked to work in a serial manner. So here you assign the[...]

Vigor2820 Series User’s Guide 77 Please set at least one profile for anti-virus in CSM>> W eb Content Filter Pr ofile web page first. For troubleshooting needs, you can specify to record information for W eb Content Filter Profile by checking the Log box. It will be sent to Syslog server . Please refer to section 3.14.5 Syslog/Mail Alert fo[...]

Vigor2820 Series User’s Guide 78 Session timeout –Setting timeout for sessions can make the best utilization of network resources. However , Queue timeout is configured for TCP protocol onl y; session timeout is configured for the data flow which matched with the firewall rule. Some on-line games (for example: Half Life) will use lots of fragme[...]

Vigor2820 Series User’s Guide 79 To edit Filter Rule , click the Filter Rule index button to enter the Filter Rule setup page. Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index(1-15) Set PCs on LAN to work at certain time interval o[...]

Vigor2820 Series User’s Guide 80 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type. From the IP Group drop down list[...]

Vigor2820 Series User’s Guide 81 want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port - (=) – when the first and last value are the same, it indicates one port; when the first and last val[...]

Vigor2820 Series User’s Guide 82 record information for URL Content Filter by checking the Log box. It will be sent to Syslog server . Please ref er to section 3.14.5 Syslog/Mail Alert for more detailed information. W eb Conten t Filter Select one of the W eb Content Filter profile settings (created in CSM>> W eb Content Filter ) for applyi[...]

Vigor2820 Series User’s Guide 83 Window size – It determines the size of TCP protocol (0~65535). The m ore the value is, the better the performance will be. However , if the network is not stable, sm all value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources. However , Queue tim[...]

Vigor2820 Series User’s Guide 84 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is composed by 7 filter rules, which can be [...]

Vigor2820 Series User’s Guide 85 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defense [...]

Vigor2820 Series User’s Guide 86 detecting this malicious exploration behavior by monitoring the port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router will ignore a[...]

Vigor2820 Series User’s Guide 87 indicate the protocol type running over the upper layer. However, the protocol types greater than 100 are reserved and undefined at this time. Therefore, the router should have ability to detect and reject this kind of packets. Warning Messages We provide Syslog function for user to retrieve message from Vigor rou[...]

Vigor2820 Series User’s Guide 88 3 3 . . 5 5 . . 1 1 I I P P O O b b j j e e c c t t You can set up to 192 sets of IP Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed.[...]

Vigor2820 Series User’s Guide 89 Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address. If you choose LAN as the Interface here, and choose LAN as the direction setting in Edit Filter Rule , then all the IP addresses specif[...]

Vigor2820 Series User’s Guide 90 3 3 . . 5 5 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN [...]

Vigor2820 Series User’s Guide 91 3 3 . . 5 5 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Name Type a name for this profile. Protocol Sp[...]

Vigor2820 Series User’s Guide 92 (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this profile. (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first an[...]

Vigor2820 Series User’s Guide 93 Name Type a name for this profile. Available Service Type Objects All the available service objects that you have added on Objects Setting>>Service Type Object will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box. 3 3 . . 5 5 . . 5 5 K K e [...]

Vigor2820 Series User’s Guide 94 Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For exa mple, type gambling as Contents. When you browse th e webp age, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. 3 3 . . 5 5 . . 6 6 K K e [...]

Vigor2820 Series User’s Guide 95 Name Type a name for this group. Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects Click button to add the selected Keyword objects in this box. 3 3 [...]

Vigor2820 Series User’s Guide 96 Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile.[...]

Vigor2820 Series User’s Guide 97 3 3 . . 5 5 . . 8 8 I I M M O O b b j j e e c c t t This page allows you to set 32 profiles for In stant Messenger. These profiles will be applied in CSM>>IM/P2P Filter Profile for filtering. Set to Factory Default Clear all profiles. Click the number under Profile column for conf iguration in details. There[...]

Vigor2820 Series User’s Guide 98 Profile Name Type a name for this profile. Type a name for such profile and check all the ite ms that not allowed to be used in the host. Finally, click OK to save this profile.[...]

Vigor2820 Series User’s Guide 99 3 3 . . 5 5 . . 9 9 P P 2 2 P P O O b b j j e e c c t t This page allows you to set 32 profiles for p eer-to-peer application. These profiles will be applied in CSM>>IM/P2P Filter Profile for filtering. Set to Factory Default Clear all profiles. Click the number under Profile column for conf iguration in det[...]

Vigor2820 Series User’s Guide 100 Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allowed to be used in the host. Finally, click OK to save this profile. 3 3 . . 5 5 . . 1 1 0 0 M M i i s s c c O O b b j j e e c c t t This page allows you to set 32 profiles for mi scellaneous applicatio[...]

Vigor2820 Series User’s Guide 101 Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allowed to be used in the host. Finally, click OK to save this profile. 3 3 . . 6 6 C C S S M M CSM is an abbreviation of Content Security Management which is used to control IM/P2P usage, filter the web c[...]

Vigor2820 Series User’s Guide 102 To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the ina ppropriate web sites but also prohibit other web feature where malicious code may conceal. Once a user t ype in or click on an URL with objectionable ke ywords, URL keyword [...]

Vigor2820 Series User’s Guide 103 Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Profile Name Type a name for the CSM profile. Each profile can contain three objects settings, IM Object, P2P Object and Misc Object. Such profile can be applied in the Firewall>>General Setup and Firewal[...]

Vigor2820 Series User’s Guide 104 On the other hand, Vigor router can prevent user from accidentally downloading malicious codes from web pages. It’s very common that malicious codes conceal in the executable objects, such as ActiveX, Java Applet, compre ssed files, and other executable files. Once downloading these types of files from websites[...]

Vigor2820 Series User’s Guide 105 Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages that match with the conditions specified in URL Access Control and Web Feature below passing through. When you choose this setting, both configuration set in this page for URL Access Control and Web [...]

Vigor2820 Series User’s Guide 106 Block - Restrict accessing into the corresponding webpage with the keywords listed on the box below. If the web pages do not match with the keyword set here, it will be processed with reverse action. Group/Object Selections – The Vigor router provides several frames for users to define ke ywords and each frame [...]

Vigor2820 Series User’s Guide 107 If the web pages do not match with the specified feature set here, it will be processed with reverse action. Cookie - Check the box to filter out the cookie transmission from inside to outside world to prot ect the local user's privacy. Proxy - Check the box to reject any proxy transmission. To control effic[...]

Vigor2820 Series User’s Guide 108 You can set eight profiles as Web content filter. Simply click the index num ber under Profile to open the following web page. Action Pass - allow accessing into the corr esponding webpage with the categories listed on the box below. Block - restrict accessing into the corresponding webpage with the categories li[...]

Vigor2820 Series User’s Guide 109 If the web pages do not match with the specified feature set here, it will be processed with reverse action. Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass w ill be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All[...]

Vigor2820 Series User’s Guide 110 To activate the function of limit session, simply click Enable and set the default session limit. Enable Click this button to activate the function of limit session. Disable Click this button to close the function of limit session. Default session limit Defines the default session number used for each computer in[...]

Vigor2820 Series User’s Guide 111 3 3 . . 7 7 . . 2 2 B B a a n n d d w w i i d d t t h h L L i i m m i i t t The downstream or upstream from FTP, HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs. Please use Limit Bandwidth to make the bandwidth usage more efficient. In the Bandwidth Mana[...]

Vigor2820 Series User’s Guide 112 Edit Allows you to edit the settings for the selected limitation. Delete Remove the selected settings existing on the limitation list. Index (1-15) in Schedule Setup You can type in four sets of time schedule for your request. All the schedules can be set previously in Application – Schedule web page and you ca[...]

Vigor2820 Series User’s Guide 113 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s eff[...]

Vigor2820 Series User’s Guide 114 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK , then click Setu[...]

Vigor2820 Series User’s Guide 115 Management>>Quality of Service . E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one. After you click the Edi[...]

Vigor2820 Series User’s Guide 116 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit button to set the remote IP address (on LAN/WAN) for the rule. Edit It allows you to edit s[...]

Vigor2820 Series User’s Guide 117 E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page.[...]

Vigor2820 Series User’s Guide 118 For adding a new service type, click Add to open the following pag e. Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range as the Type . If you select Range, you have to type in the starting port numbe[...]

Vigor2820 Series User’s Guide 119 3 3 . . 8 8 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 8 8 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address assigned to [...]

Vigor2820 Series User’s Guide 120 WAN Interface Display current WAN interface used for accessing Internet. Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server.[...]

Vigor2820 Series User’s Guide 121 In the DDNS setup menu, uncheck Enable Dynamic DNS Setup , and push Clear All button to disable the function and clear all accounts from the router. Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. 3 3 . . 8 8 . . [...]

Vigor2820 Series User’s Guide 122 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply durin[...]

Vigor2820 Series User’s Guide 123 2. Configure the PPPoE always on from 9:00 to 18:00 f or whole week. 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE In ternet access profile. Now , the PPPoE Internet connection will follow the schedule order to perform For ce On or Force Down ac[...]

Vigor2820 Series User’s Guide 124 3 3 . . 8 8 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT router[...]

Vigor2820 Series User’s Guide 125 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your P C may cause the UPnP function not working properly. This is because these applicati ons will block the accessing ability of some network ports. Security Considerations Activating[...]

Vigor2820 Series User’s Guide 126 Enable IGMP Proxy Check this box to enable this function. The application of multicast will be executed through WAN port. Enable IGMP Snooping Check this box to enable this function. The application of multicast will be executed for the clients in LAN. Group ID This field displays the ID port for the multicast gr[...]

Vigor2820 Series User’s Guide 127 choose Wake by IP Address, you have to choose the correct IP address. IP Address The IP addresses that have been configured in Firewall>>Bind IP to MAC will be shown in this drop down list. Choose the IP address from the drop down list that you want to wake up. MAC Address Type any one of the MAC address of[...]

Vigor2820 Series User’s Guide 128 3 3 . . 9 9 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet. In short, by VPN technology, you can send data between two computers across a shared[...]

Vigor2820 Series User’s Guide 129 Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP or CHAP Selecting this option means the router will attempt to authenticate dial-in users with th e CHAP protocol first. If the dial-in user does not support this protocol, it will f[...]

Vigor2820 Series User’s Guide 130 two IP addresses of 192.168.1. 200 and 192.168.1.201 are reserved for ISDN remote dial-in user. 3 3 . . 9 9 . . 3 3 I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration. There are two phases of IPSec. ¾ Phase 1: negotiation of IKE [...]

Vigor2820 Series User’s Guide 131 Confirm Pre-Shared Key- Retype the characters to confirm the pre-shared key. IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypte d. By default, this option is active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and [...]

Vigor2820 Series User’s Guide 132 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can be IP Address, Domain, or E-mail Address . The box under th[...]

Vigor2820 Series User’s Guide 133 3 3 . . 9 9 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection. You may set parameters including specified connection peer ID, con[...]

Vigor2820 Series User’s Guide 134 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback function b[...]

Vigor2820 Series User’s Guide 135 select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. IKE A[...]

Vigor2820 Series User’s Guide 136 3 3 . . 9 9 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including sp ecified connection direction (dial-in or dial-out), connection peer ID, connection ty pe (VPN connection - including PPT P, IPSec Tunnel[...]

Vigor2820 Series User’s Guide 137 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. Netbios Naming Packet Pass – click it to have an inquiry for data transm ission between the hosts located on both sides of VPN Tunnel while connecting. Block – When there is confl[...]

Vigor2820 Series User’s Guide 138 as the only channel for VPN connection. WAN2 First - While connecting, the router will use WAN2 as the first channel for VPN connection. If WAN2 fails, the router will use another WAN interface instead. WAN2 Only - While connecting, the router will use WAN2 as the only channel for VPN connection. Call Direction S[...]

Vigor2820 Series User’s Guide 139 during negotiation. Otherwise, the dial-out VPN connection becomes one pure L2TP connection. Must: Specify the IPSec policy to be definitely applied on the L2TP connection. User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable w[...]

Vigor2820 Series User’s Guide 140 IKE phase 1 mode - Select from Main mode and Aggressive mode. The ultimate outcome is to exchange security proposals to create a protected secure channel. Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the IPSec session. However, the Aggressive mode is fa[...]

Vigor2820 Series User’s Guide 141 the remote router. This feature is useful for n model only. Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for n model only. In addition, yo[...]

Vigor2820 Series User’s Guide 142 becomes one pure L2TP connection. Must - Specify the IPSec policy to be definitely applied on the L2TP connection. Specify CLID or Remote VPN Gateway You can specify the IP address of the remote dial-in user or peer ID (should be the same with the ID setting in dial-in type) by checking the box. Enter Peer ISDN n[...]

Vigor2820 Series User’s Guide 143 exhausted, the function will be disabled automatically. Callback Budget (Unit: minutes)- Specify the time budget for the dial-in user. The budget will be decreased automatically per callback connection. The default value 0 means no limitation of callback period. My WAN IP This field is only applicable when you se[...]

Vigor2820 Series User’s Guide 144 3 3 . . 9 9 . . 7 7 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You m ay also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Dial Click [...]

Vigor2820 Series User’s Guide 145 3 3 . . 1 1 0 0 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc., and the digital signature of th[...]

Vigor2820 Series User’s Guide 146 Type in all the information that the window request. Then click Generate again. Import Click this button to im port a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After [...]

Vigor2820 Series User’s Guide 147 3 3 . . 1 1 0 0 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. [...]

Vigor2820 Series User’s Guide 148 3 3 . . 1 1 0 0 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them . If you want to set encryption password for these certificates, please ty[...]

Vigor2820 Series User’s Guide 149 registration messages to validate. Then, bo th parties’ SIP proxies will forward the sequence of messages to caller to establish the session . If you both register to the same SIP Registrar, then it will be illustrated as below: The major benefit of this mode is that you don ’t have to memorize your friend’[...]

Vigor2820 Series User’s Guide 150 P P h h o o n n e e B B o o o o k k In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make calls quickly and easily by using “speed-dial” Phone Number . There are total 60 index entries in the phonebook for you to store all your friends and family mem bers’ SIP addre[...]

Vigor2820 Series User’s Guide 151 Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots of[...]

Vigor2820 Series User’s Guide 152 Loop through For the model of Vigor 2820Vn, the selection should be as the following: Backup Phone Number When the VoIP phone is obstructs or the Internet breaks down for some reasons, the backup phone will be dialed out to replace the VoIP phone number. At this time, the phone call will be changed from VoIP phon[...]

Vigor2820 Series User’s Guide 153 Enable Check this box to invoke this setting. Prefix Number The phone number set here is used to add, strip, or replace the OP number. Mode None - No action. Add - When you choose this mode, the OP number will be added with the prefix number for calling out through the specific VoIP interface. Strip - When you ch[...]

Vigor2820 Series User’s Guide 154 SIP server. OP Number The front number you type here is the first part of the account number that you want to execute special function (according to the chosen mode) by using the prefix num ber. Min Len Set the m inimal length of the dial number for applying the prefix number settings. Take the above picture (Pre[...]

Vigor2820 Series User’s Guide 155 Enable Click this to enable this entry. Call Direction Determine the direction for the phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/URL or number. Specific URI/URL or Specific Number This field w[...]

Vigor2820 Series User’s Guide 156 For Block Unknown Domain – this function can block incomi ng calls (through Phone port) from unrecognized domain that is not specified in SIP accounts. Such control also can be done based on preconfigured schedules. For Block IP Address – this function can block incoming calls (through Phone port) com ing fro[...]

Vigor2820 Series User’s Guide 157 Last Call Return [Miss] Sometimes, people might miss some phone calls. Please dial number typed in this field to know where the last phone call comes from and call back to that one. Last Call Return [In] You have finished an incoming phone call, however you want to call back again for some reason. Please dial num[...]

Vigor2820 Series User’s Guide 158 Call Waiting [Act] Dial the number typed in this field to make all the incoming calls waiting for your answer. Call Waiting [Deact] Dial the number typed in this field to release this function. Block Anonymous[Act] Dial the number typed in this field to block all the incoming calls with unknown ID. Block Anonymou[...]

Vigor2820 Series User’s Guide 159 As Vigor VoIP Router is turned on, it will first register with Registrar using AuthorizationUser@Domain/Realm. After that, your call will be bypassed by SIP Proxy to the destination using AccountName@Domain/Realm as identity. Index Click this link to access into next page for setting SIP account. Profile Display [...]

Vigor2820 Series User’s Guide 160 Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the SIP proxy server. Account Name Display the account name of SIP address before @. Ring Port Specify which port will ring when receiving a phone call. Set Phone, ISDN1-S0 or ISDN-TE as [...]

Vigor2820 Series User’s Guide 161 Call without Registration . Choosing Auto is recommended. The system will select a proper way for your VoIP call. SIP Port Set the port num ber for sending/receiving SIP message for building a session. The default value is 5060. Your peer must set the same value in his/her Registrar. Domain/Realm Set the domain n[...]

Vigor2820 Series User’s Guide 162 internal lines with numbers (30 – 39) offered for ISDN-S0 . You can specify one of them or choose Any as ring port for specified SIP account. By the way, ISDN-S0 can be used by mapping with MSN numbers. Ring Pattern Choose a ring tone type for the VoIP phone call. 3 3 . . 1 1 1 1 . . 3 3 P P h h o o n n e e S S[...]

Vigor2820 Series User’s Guide 163 For Vigor2820VS/Vigor2820VSn models, you will see the following page: Phone List Port – For Vigor2820V/Vigor2820Vn, there are two phone ports provided here for you to configur e. However, for Vigor2820VS/Vigor2820VSn, there are three phone ports provided here for you to configure. Two (Index 1 to 2) are fixed a[...]

Vigor2820 Series User’s Guide 164 Disable Port The router can support up to 4 VoIP calls sim ultaneously. In general, only 3 VoIP calls can be dialed through ISDN at the same time. If you want to use four ISDN channels, you have to check this box. When the Phone port i s disabled, it could not be used anymore. RTP Symmetric RTP – Check this box[...]

Vigor2820 Series User’s Guide 165 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically. Call Forward[...]

Vigor2820 Series User’s Guide 166 profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hi de the caller ID on the display panel of the phone set. Call Waiting Check this box to invoke this function. A notice sound will appear to tell the user new phone call is waiting for yo[...]

Vigor2820 Series User’s Guide 167 Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It determines the default direction for the call route of the router. Such feature is available for Vigor2820VS and Vigor2820VSn To ISDN (for VoIP) - The router is set by using ISDN call. To change ISDN call in[...]

Vigor2820 Series User’s Guide 168 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC D[...]

Vigor2820 Series User’s Guide 169 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 1 1 - - S S 0 0 P P o o r r t t Click the number link of Index 2 (ISDN1-S0), you can access into the following page for configuring Phone settings. Hotline Check the box to enable it. Type in the SIP URL in the field for d[...]

Vigor2820 Series User’s Guide 170 Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call. During the period, the one who dial in will listen bus y tone, yet the local user will not listen any ring tone. Index (1-15) in Schedul[...]

Vigor2820 Series User’s Guide 171 invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile names for the accounts as the default one for this phone setting. ISDN-S0 port can pick up multiple incoming calls simulta[...]

Vigor2820 Series User’s Guide 172 Region Select the proper region which you are located. The common settings of Caller ID Type , Dial tone , Ringing tone , Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ri[...]

Vigor2820 Series User’s Guide 173 recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC Dial Tone Power Leve l - This setting is used to adjust the [...]

Vigor2820 Series User’s Guide 174 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 2 2 - - T T E E P P o o r r t t ( ( A A v v a a i i l l a a b b l l e e f f o o r r V V S S n n m m o o d d e e l l o o n n l l y y ) ) Vigor2820VSn allows users to switch the func tion of ISDN2 port between TE or S0 mode.[...]

Vigor2820 Series User’s Guide 175 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically. Call Forward[...]

Vigor2820 Series User’s Guide 176 profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hi de the caller ID on the display panel of the phone set. Prefer Codec Select one of five codecs as the default for your VoIP calls. The codec used for each call will be negotiated with t[...]

Vigor2820 Series User’s Guide 177 configured. Loop Through to ISDN1-S0 Port – Choose this radio button to make all the calls controlled by ISDN line. In addition, you can press the Advanced button to configure tone settings, volume gain, MISC and DTMF mode. Advanced setting is provided for fitting the telecommunication custom for the local area[...]

Vigor2820 Series User’s Guide 178 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC D[...]

Vigor2820 Series User’s Guide 179 Payload Type (rfc2833) - Choose a nu mber from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. 3 3 . . 1 1 1 1 . . 4 4 S S t t a a t t u u s s From this page, you can find codec, connection and ot her important call status for each port. Refresh Seconds Specify the [...]

Vigor2820 Series User’s Guide 180 WAIT_ANS - Indicates that a connection is launched and waiting for remote user’s answer. ALERTING - Indicates that a call is coming. ACTIVE- Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel. PeerID The present in-call or out-call peer ID (the format may[...]

Vigor2820 Series User’s Guide 181 ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local ISDN network, you should choose the correct country code. D-Channel Mode It allows you to config ure ISDN layer2 protocol as: Point-to-Point - Configure ISDN port to use static TEI (Terminal Endpo[...]

Vigor2820 Series User’s Guide 182 1-10 fields – Fill in the portion that is di fferent with the own number. For example, the own number is 123456 7 and MSN numbers are 12345 50 , 12345 17 and 12345 82 respectively. You can type in 1234567 in the filed of own number. Fill in 50 , 17 and 67 on the fields of 1, 2 and 3 o ne by one without typing 1[...]

Vigor2820 Series User’s Guide 183 Open ISDN>> General Setup and set as the following: When remote user calls you by dialing 5972727 , the router will make Phone port ringing. When remote user calls you by dialing 5972728 , the router will make ISDN phone under ISDN1-S0 port and configured with internal MSN number 32 ringing . When remote us[...]

Vigor2820 Series User’s Guide 184 ISP Access Setup ISP Name - Enter your ISP name such as Seednet, Hinet and so on. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP. Require ISP Callback (CBCP) - If your ISP supports the callback[...]

Vigor2820 Series User’s Guide 185 IP Address Assignment Method (IPCP) In most environments, you should not change these settings as most ISPs provide a dynamic IP address for the router when it connects to the ISP. If your ISP provides a fixed IP address, check Yes and enter the IP address in the field of Fixed IP Address . Select Dialing to Dual[...]

Vigor2820 Series User’s Guide 186 Primary ISP Setup ISP Name - Enter your ISP name. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP. IP Address Assignment Method (IPCP) for primary ISP setup In most environments, you should not [...]

Vigor2820 Series User’s Guide 187 Click Dial ISDN . Wait for a moment after clicking the dial link. Then, a successful ISDN connection will be shown as the following. 3 3 . . 1 1 2 2 . . 4 4 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router ( only for the ISDN m odels) be remotely activated, or be able to dial [...]

Vigor2820 Series User’s Guide 188 Call Control Setup Dial Retry - It specifies th e dial retry counts per triggered packet. A triggered packet is th e packet whose destination is outside the local network. The default setting is no dial retry. If set to 5, for each triggered packet, the router will dial 5 times until it is connected to the ISP or[...]

Vigor2820 Series User’s Guide 189 Bandwidth-On-Demand (BOD) Setup Bandwidth-On-Demand is for Multiple-Link PPP (ML-PPP or MP). The parameters are only applied when you set the Link Type to Dialup BOD . The ISDN usually use one B channel to access the Internet or remote network when you choose the Dialup BOD link type. The router will use the par[...]

Vigor2820 Series User’s Guide 190 S S e e c c u u r r i i t t y y O O v v e e r r v v i i e e w w Real-time Hardware Encryption: Vigor Router is equipped with a hardware AES encryption engine so it can apply the highest pr otection to your data without influencing user experience. Complete Security Standard Selection: To ensure the security and p[...]

Vigor2820 Series User’s Guide 191 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Check the box to enable wireless funct[...]

Vigor2820 Series User’s Guide 192 Mode At present, the router can connect to 11b Only, 11g Only, 11n Only, Mixed(11b+11g), Mixed(11 g+11n) and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mix (11b+11g+11n) mode. Index(1-15) Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 sch[...]

Vigor2820 Series User’s Guide 193 Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync filed instead of long pream ble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Check it to use Long P[...]

Vigor2820 Series User’s Guide 194 Download – Type the transmitting rate for data download. Default value is 30,000 kbps . 3 3 . . 1 1 3 3 . . 3 3 S S e e c c u u r r i i t t y y This page allows you to set security with diffe rent modes for SSID 1, 2, 3 and 4 respectively. After configuring the correct settings, please click OK to save and invo[...]

Vigor2820 Series User’s Guide 195 WPA2/802.1x Only- Accepts only WPA2 clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. Mixed (WPA+WPA2/802.1x only) - Accepts WPA and WPA2 clients simultaneously and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. WPA/PSK- Accepts on[...]

Vigor2820 Series User’s Guide 196 Enable Max Access Filter Select to enable the MAC Address filter for wireless LAN identified with SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN. For example, they can be grouped under SSID 1 and SSI D 2 at the same time if you [...]

Vigor2820 Series User’s Guide 197 Note: Such function is available for the wi reless station with WPS supported. It is the simplest way to build connection be tween wireless network clients and vigor router. Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time. He/she only n[...]

Vigor2820 Series User’s Guide 198 For WPS is supported in WPA-PSK or WPA2- PSK mode, if you do not choose such mode in Wireless LAN>>Security , yo u will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again. Below shows Wireless LAN>>WPS web pag[...]

Vigor2820 Series User’s Guide 199 3 3 . . 1 1 3 3 . . 6 6 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge traffic between two LANs through the air. y Extend the coverage range of a WLAN. To meet the above[...]

Vigor2820 Series User’s Guide 200 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Mode Choos[...]

Vigor2820 Series User’s Guide 201 Security There are three types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page. If you did not set any key in [...]

Vigor2820 Series User’s Guide 202 Channel Bandwidth 20- the router will use 20Mhz for data transmission and receiving between the AP and the stations. 20/40 – the router will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability. Such channel can increase the performance for data transit. Guard Interval It i[...]

Vigor2820 Series User’s Guide 203 will influence the time delay for WMM accessing categories. For the service of voice or video image, please set small value for AC_VI and AC_VO categories. As to the service of e-mail or web browsing, please set large value for AC_BE and AC_BK categories. CWMin/CWMax CWMin means contention Window-Min and CWMax m [...]

Vigor2820 Series User’s Guide 204 Scan It is used to discover all the connected AP. The results will be shown on the box above this button. Statistics It displays the statistics for the channels used by APs. Add If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page or choose the AP MAC[...]

Vigor2820 Series User’s Guide 205 Refresh Click this button to refresh the status of station list. Add Click this button to add current selected MAC address into Access Contro l.[...]

Vigor2820 Series User’s Guide 206 3 3 . . 1 1 4 4 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items fo[...]

Vigor2820 Series User’s Guide 207 MAC Address Display the MAC address of the LAN Interface. 1 st IP Address Display the IP address of the LAN interface. 1 st Subnet Mask Display the subnet mask address of the LAN interface. DHCP Server Display the current status of DHCP server of the LAN interface. DNS Display the assigned IP address of the prima[...]

Vigor2820 Series User’s Guide 208 ACS Server On Choose the interfac e for the router connecting to ACS server. ACS Server URL/Username/Password – Such data must be typed according to the ACS (Auto Configuration Server) you want to link. Please refer to Auto Configuration Server user’s manual for detailed information. CPE Client It is not nece[...]

Vigor2820 Series User’s Guide 209 Old Password Type in the old password. The factory default setting for password is blank. New Password Type in new password in this filed. Confirm Password Type in the new password again. When you click OK, the login window w ill appear. Please use the new password to access into the web configurator again. 3 3 .[...]

Vigor2820 Series User’s Guide 210 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating exam ples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available. Note: Backup for Certif[...]

Vigor2820 Series User’s Guide 211 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click Browse button to choose the correct confi guration file for uploading to the router. 3. Click Restore button[...]

Vigor2820 Series User’s Guide 212 Send a test e-mail Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for verify the mail address is available or not. SMTP Server The IP address of the SMTP server. Mail To Assign a mail address for sending mails out. Ret[...]

Vigor2820 Series User’s Guide 213 3 3 . . 1 1 4 4 . . 6 6 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as ro[...]

Vigor2820 Series User’s Guide 214 3 3 . . 1 1 4 4 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session. The default value is 50[...]

Vigor2820 Series User’s Guide 215 Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a pr oper name. The default setting is public. Notification Host[...]

Vigor2820 Series User’s Guide 216 3 3 . . 1 1 4 4 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this ex[...]

Vigor2820 Series User’s Guide 217 3 3 . . 1 1 5 5 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 5 5 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial-ou[...]

Vigor2820 Series User’s Guide 218 3 3 . . 1 1 5 5 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Refresh Click it to reload the page. 3 3 . . 1 1 5 5 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content [...]

Vigor2820 Series User’s Guide 219 3 3 . . 1 1 5 5 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Index It displays the connection ite[...]

Vigor2820 Series User’s Guide 220 Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. 3 3 . . 1 1 5 5 . . 6 6 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen th[...]

Vigor2820 Series User’s Guide 221 3 3 . . 1 1 5 5 . . 7 7 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management. You have to enable IP bandwidth limi[...]

Vigor2820 Series User’s Guide 222 Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column. 3 3 . . 1 1 5 5 . . 8 8 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth/WAN2 Bandwidth, Sessions,[...]

Vigor2820 Series User’s Guide 223 3 3 . . 1 1 5 5 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run . The result of route trace will be shown on the screen. T[...]

Vigor2820 Series User’s Guide 224 This page is left blank.[...]

Vigor2820 Series User’s Guide 225 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d [...]

Vigor2820 Series User’s Guide 226 For using IPSec -based service, such as IPSec or L2 TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable b[...]

Vigor2820 Series User’s Guide 227 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s selected, y[...]

Vigor2820 Series User’s Guide 228 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router [...]

Vigor2820 Series User’s Guide 229 2. Then, for usi ng PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LA[...]

Vigor2820 Series User’s Guide 230 Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below t[...]

Vigor2820 Series User’s Guide 231 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets des tined to the remote network to Router[...]

Vigor2820 Series User’s Guide 232 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

Vigor2820 Series User’s Guide 233 3. Go to Remote Dial-In User . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security [...]

Vigor2820 Series User’s Guide 234 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel to Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. Yo[...]

Vigor2820 Series User’s Guide 235 3. In Step 2. Connect to VPN Server , click Insert button to ad d a new entry. If an IPSec-based service is selected as shown below, You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in [...]

Vigor2820 Series User’s Guide 236 server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m [...]

Vigor2820 Series User’s Guide 237 3. Return to previous page. Enter th e Name of Index Class 1 by clicking Edit link. T ype the name “ E-mail ” for Class 1. 4. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP .[...]

Vigor2820 Series User’s Guide 238 5. Return to previous page. Enter th e Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS . And click OK . 6. Click Setup link for W AN1. 7. Check Enable UDP Band width Control on the bott om to prevent enormous UDP traffic of V oIP influent other applicatio[...]

Vigor2820 Series User’s Guide 239 9. Click Edit to open the following window . Check the ACT box, first. 10. Then click Edit of Local Address to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s IP address. Leave other fields and click OK .[...]

Vigor2820 Series User’s Guide 240 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.1 68.1.1/255.255.255.0. The built-in DHCP server is enabled so it [...]

Vigor2820 Series User’s Guide 241 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage. 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v[...]

Vigor2820 Series User’s Guide 242 Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@iptel.org SIP Accounts Settings --- Profile Name: draytel1 Register via: Auto SIP Port: 5060 (default) Domain/Realm: draytel.org Proxy: draytel.org Act as outbound proxy: unhecked Display Name: John Account Number/Name: 1234 A[...]

Vigor2820 Series User’s Guide 243 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: draytel 1 Registe[...]

Vigor2820 Series User’s Guide 244 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling. Arn[...]

Vigor2820 Series User’s Guide 245 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. 1. Insert CD of the router to your CD ROM. 2. From the we[...]

Vigor2820 Series User’s Guide 246 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally , click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 12. Type in your router IP, usu[...]

Vigor2820 Series User’s Guide 247 14. Click Send . 15. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r[...]

Vigor2820 Series User’s Guide 248 1. Go to Certificate Management and choose Local Certificate . 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.[...]

Vigor2820 Series User’s Guide 249 4. Connect to C A server via web browser. Follo w the instruction to submit the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate . Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS [...]

Vigor2820 Series User’s Guide 250 Then you have done the request and the ser ver now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate . Now you should get a certificate (.cer file) and save it. 5. Back to Vigor router, go to Local Certificate . Click IMPORT button and browse the file to import the certifica[...]

Vigor2820 Series User’s Guide 251 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA cert[...]

Vigor2820 Series User’s Guide 252 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refres[...]

Vigor2820 Series User’s Guide 253 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Che[...]

Vigor2820 Series User’s Guide 254 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong network[...]

Vigor2820 Series User’s Guide 255 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configur[...]

Vigor2820 Series User’s Guide 256 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router. The most impor[...]

Vigor2820 Series User’s Guide 257 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly. Click WAN1 or WAN2 link to review the settings that you configured previo[...]

Vigor2820 Series User’s Guide 258 F F o o r r M M P P o o A A U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if DSL Modem Settings is set appropriately. Check if IP Address, Subnet Mask and Gateway are set correctly (must identify with the values from your ISP) if you choose Specify an IP address .[...]

Vigor2820 Series User’s Guide 259 F F o o r r S S t t a a t t i i c c / / D D y y n n a a m m i i c c I I P P U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if IP address, Subnet Mask and Gateway are entered with correct values that you got from your ISP . F F o o r r P P P P T T P P U U s s e e r r s s 1. Check if the En[...]

Vigor2820 Series User’s Guide 260 5 5 . . 5 5 P P r r o o b b l l e e m m s s f f o o r r 3 3 G G N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n When you have trouble in using 3G network transm ission, please check the following: C C h h e e c c k k i i f f U U S S B B L L E E D D l l i i g g h h t t s s o o n n o o r r o o f[...]

Vigor2820 Series User’s Guide 261 S S o o f f t t w w a a r r e e R R e e s s e e t t You can reset the router to factory default via Web page. Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK . After few seconds, the router will return all[...]