Draytek Vigor2120n-plus manuale d’uso

[...]

Vigor2120 Series User’s Guide ii[...]

Vigor2120 Series User’s Guide iii Vigor2120 Series Broadband Firewall Router User’s Guide Version: 1.1 Firmware Version: V3.7.5.4 (For future update, please visit Dray Tek web site) Date: March 31, 2015[...]

Vigor2120 Series User’s Guide iv Intellectual Property Rights (IPR) Information Copyrights © All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, tran smitted, tran scribed, stored in a retrieval system, or translated into any languag e without written permission from the copyright[...]

Vigor2120 Series User’s Guide v European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, H ukou Township , Hsinchu In dustrial Park, Hsi nchu County, Tai wan 303 Product: Vigor2120 Ser ies Router DrayTek Corp. declares that Vigor2120 Series of ro uters are in compliance with the following essential requirements [...]

Vigor2120 Series User’s Guide vi[...]

Vigor2120 Series User’s Guide vii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s Introduction................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 2 1.2 LED Indi[...]

Vigor2120 Series User’s Guide viii 3.3 How to Build a LAN-to-LAN VPN Between Remote Of fice and Headquarte r via IPsec T unnel (Main Mode) .................................................................................................................... ............ 69 3.4 How to Optimize the Band width through QoS T echnology .................[...]

Vigor2120 Series User’s Guide ix 4.5.10 SMS/Mail Se rvice Ob ject ............................................................................................ 198 4.5.11 Notifica tion Object..................................................................................................... .. 203 4.6 CSM .........................................[...]

Vigor2120 Series User’s Guide x 4.13 USB App lication ........................................................................................................... ..... 305 4.13.1 USB Gene ral Setti ngs................................................................................................. 305 4.13.2 USB User Management ..................[...]

Vigor2120 Series User’s Guide xi Telnet Command: cs m appe c onfig ....................................................................................... 363 Telnet Command: csm uc f ..................................................................................................... 363 Telnet Command: csm uc f obj IND EX uac ..................[...]

Vigor2120 Series User’s Guide xii Telnet Command: mngt ss hport ............................................................................................ 412 Telnet Command: m ngt ftpserver .......................................................................................... 412 Telnet Command: mngt no ping ...............................[...]

Vigor2120 Series User’s Guide xiii Telnet Command: srv dhcp star tip ......................................................................................... 449 Telnet Command: sr v dhcp status ......................................................................................... 449 Telnet Command: srv dhcp leas etime ......................[...]

Vigor2120 Series User’s Guide xiv Telnet Command: vlan sub net ............................................................................................... 480 Telnet Command: vlan subm ode ........................................................................................... 480 Telnet Command: vlan tag ged...............................[...]

Vigor2120 Series User’s Guide xv Telnet Comm and: wol ............................................................................................................ 525 Telnet Command: appqos ..................................................................................................... 525[...]

[...]

Vigor2120 Series User’s Guide 1 I I n n t t r r o o d d u u c c t t i i o o n n N N o o t t e e : : T T h h i i s s i i s s a a g g e e n n e e r r i i c c I I n n t t e e r r n n a a t t i i o o n n a a l l v v e e r r s s i i o o n n o o f f t t h h e e u u s s e e r r g g u u i i d d e e . . S S p p e e c c i i f f i i c c a a t t i i o o n n [...]

Vigor2120 Series User’s Guide 2 1 1 . . 1 1 W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n B B u u t t t t o o n n s s E E x x p p l l a a n n a a t t i i o o n n Several main buttons appeared on the web pages are defined as the following: Save and apply current settings. Cancel current settings and rec over to the previous saved[...]

Vigor2120 Series User’s Guide 3 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 1 1 2 2 0 0 LED Status Ex p lanation Off Th[...]

Vigor2120 Series User’s Guide 4 Interface Description Restore the default settings. Usage: Turn on the router. Press the button and keep for more than 6 seconds. Then the router will restart with the factory default configuration. WAN Connector for accessing the Internet. LAN 1- 4 Connecters for local network devices (LAN). PWR: Connecter for a p[...]

Vigor2120 Series User’s Guide 5 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 1 1 2 2 0 0 n n - - p p l l u u s s LED Status Ex p lanation Off The system is not ready or is failed. ACT Blinking The system is ready and can work normally. On A USB device is connected and active. USB Blinki ng The dat a is transmitting. On Wireless functio[...]

Vigor2120 Series User’s Guide 6 Interface Description WLAN ON/OFF WPS WLAN On - Press the button and release it within 2 seconds. When the wireless function is ready, the 2.4G/5G blue LED on front panel will be on. WLAN Off - Press the button and release it within 2 seconds to turn off the WLAN function. When the wireless function is not ready, 2[...]

Vigor2120 Series User’s Guide 7 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router with Ethernet cable (RJ-45). 2. Connect one end of an Ethern[...]

Vigor2120 Series User’s Guide 8 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for shar ing printing. All the PCs connected this router can print documents via the router. The exam ple provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please [...]

Vigor2120 Series User’s Guide 9 5. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port . Then, click Next .[...]

Vigor2120 Series User’s Guide 10 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1. 1 as the Port name . Then, click Next . 7. Click Standard and choose Generic Network Card .[...]

Vigor2120 Series User’s Guide 11 8. Now, your system will ask you to choose right na me of the printer t hat you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next . 9. Type a name for the chosen printer. Click Next.[...]

Vigor2120 Series User’s Guide 12 10. Choose Do not share this printe r and click Next . 11. Then, in the following dialog, click Finish .[...]

Vigor2120 Series User’s Guide 13 12. The new printer has been added and displayed under Printers and Faxes . Click the new printer icon and click Printer server properties . 13. Edit the property of the new printer you have added by clicking Configure Port .[...]

Vigor2120 Series User’s Guide 14 14. Select " LPR " on Protocol, type p1 (number 1) as Queue Name . Then click OK . Next please refer to the red rectangle for choosing the correct protocol and LPR name. The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router.[...]

Vigor2120 Series User’s Guide 15 Note 1: Some printers with the fax/scanning or ot her additional func tions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes ; find out the link of USB>>Printer Server and click it[...]

Vigor2120 Series User’s Guide 16 1 1 . . 5 5 A A c c c c e e s s s s i i n n g g W W e e b b P P a a g g e e 1. Make sure your PC connects to the router correctly. You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor route[...]

Vigor2120 Series User’s Guide 17 Note: The home page will be different slightly in accordance with the ty pe of the router you have. 5. The web page can be logged out according to the chosen condition. The default setting is Auto Logout , which means the web configuration system will logout after 5 m inutes without any operation. Change the setti[...]

Vigor2120 Series User’s Guide 18 Note: Even the password has been changed, the Username for logging to the we b user interface is still “admin”. 1 1 . . 7 7 I I n n t t r r o o d d u u c c i i n n g g D D a a s s h h b b o o a a r r d d Dashboard shows the connection status including System Information, IPv4 Internet Access, IPv6 Internet Acc[...]

Vigor2120 Series User’s Guide 19 1 1 . . 7 7 . . 1 1 V V i i r r t t u u a a l l P P a a n n e e l l On the top of the Dashboard, a virtual panel (s im ulating the physical panel of the router) displays the physical interface connection. It will be refreshed every five seconds. For detailed information about the LED display, refer to 1.2 LED Indi[...]

Vigor2120 Series User’s Guide 20 The function links of System Status, Dynam i c DDNS, TR-069, IM/P2P Block, Schedule, Syslog/Mail Alert, RADIUS, Firewall Object Setting and Data Flow Monitor are displayed here. Move your mouse cursor on any one of the links and click on it. The correspondi ng setting page will be open immediately. In addition, qu[...]

Vigor2120 Series User’s Guide 21 1 1 . . 7 7 . . 4 4 G G U U I I M M a a p p All the functions the router supports are listed w ith table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions. 1 1[...]

Vigor2120 Series User’s Guide 22 1 1 . . 7 7 . . 6 6 C C o o n n f f i i g g B B a a c c k k u u p p There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup . Simpl[...]

Vigor2120 Series User’s Guide 23 1 1 . . 8 8 O O n n l l i i n n e e S S t t a a t t u u s s Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. 1 1 . . 8 8 . . 1 1 P P h h y y s s i i c c a a l l C C o o n n n n e e c c t t i i o o n n f f o o r r I I P P v v 4 4 P [...]

Vigor2120 Series User’s Guide 24 Item Description Line – Displays the physical connection (Ethernet, or USB) of this interface. Name – Display the name of the router. Mode - Displays the type of WAN connection (e.g., PPPoE). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. GW IP - Displa[...]

Vigor2120 Series User’s Guide 25 1 1 . . 8 8 . . 3 3 V V i i r r t t u u a a l l W W A A N N Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 managem ent, VoIP service and so on. The field of Application will list the purpose of such WAN connection. 1 1 . . 9 9 S S a a v v i i n n g g C C o o n n f f i i g[...]

Vigor2120 Series User’s Guide 26 This page is left blank.[...]

Vigor2120 Series User’s Guide 27 Q Q u u i i c c k k S S e e t t u u p p There are several setup wizards offered for you to configure the router simply and quickly.  Quick Start Wizard – used for building network connection, Internet access.  Service Activation Wizard – used for activating the web content filter service.  VPN Client [...]

Vigor2120 Series User’s Guide 28 WAN1 and WAN2 will bring up different conf iguration page. Refer to the following for detailed information.[...]

Vigor2120 Series User’s Guide 29 2 2 . . 1 1 . . 1 1 F F o o r r W W A A N N 1 1 ( ( E E t t h h e e r r n n e e t t ) ) WAN1 is dedicated to physical mode in Ethernet. If you choose WAN1, please specify physical type. Then, click Next . 2 2 . . 1 1 . . 1 1 . . 1 1 P P P P P P o o E E 1. Open Wizards>>Quick Start Wi zard . Finish the passwo[...]

Vigor2120 Series User’s Guide 30 4. Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. Available settings are explained as follows: Item Description Service Name Type the service information for identifying ISP. Username Assign a specific valid user name provided by the ISP. Passwo[...]

Vigor2120 Series User’s Guide 31 6. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. 7. Now, you can enjoy surfing on the Internet.[...]

Vigor2120 Series User’s Guide 32 2 2 . . 1 1 . . 1 1 . . 2 2 P P P P T T P P / / L L 2 2 T T P P 1. Open Wizards>>Quick Start Wi zard . Finish the password settings and click Next . 2. Choose WAN1 as the WAN Interface and click the Next button. 3. The following page will be open for you to specify Internet Access Type. Click PPTP/L2TP as th[...]

Vigor2120 Series User’s Guide 33 WAN IP Configuration Obtain an IP address automatically – the router will get an IP address automatically from DHCP server. Specify an IP address – you have to type relational settings manually. IP Address - Type the IP address. Subnet Mask –Type the subnet mask. Gateway – Type the IP address of the gatewa[...]

Vigor2120 Series User’s Guide 34 2 2 . . 1 1 . . 1 1 . . 3 3 S S t t a a t t i i c c I I P P 1. Open Wizards>>Quick Start Wi zard . Finish the password settings and click Next . 2. Choose WAN1 as the WAN Interface and click the Next button. 3. The following page will be open for you to specify Internet Access Type. Click Static IP as the In[...]

Vigor2120 Series User’s Guide 35 Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. 5. A summary page will be display ed as follows. 6. Click Finish. A page of Quick Start Wizar[...]

Vigor2120 Series User’s Guide 36 2 2 . . 1 1 . . 1 1 . . 4 4 D D H H C C P P 1. Open Wizards>>Quick Start Wi zard . Finish the password settings and click Next . 2. Choose WAN1 as the WAN Interface and click the Next button. 3. The following page will be open for you to specify Internet Access Type. Click DHCP as the Internet Access Type. T[...]

Vigor2120 Series User’s Guide 37 enter the MAC address. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. 5. A summary page will be display ed as follows. 6. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. 7. Now, you can enjoy [...]

Vigor2120 Series User’s Guide 38 2 2 . . 1 1 . . 2 2 F F o o r r W W A A N N 2 2 ( ( U U S S B B ) ) WAN2 is dedicated to physical mode in USB. 1. Open Wizards>>Quick Start Wi zard . Finish the password settings and click Next 2. Choose WAN2 as the WAN Interface and click the Next button. 3. In the following page, fill in the information fo[...]

Vigor2120 Series User’s Guide 39 of the string you can set is 47 characters. APN Name – APN means Access Point Name which is provided and required by some ISPs. Type the name and click Apply . 4G USB Modem (DHCP mode) SIM Pin code –Type PIN code of the SIM card that will be used to access Internet. Network Mode – Force Vigor router to conne[...]

Vigor2120 Series User’s Guide 40 2 2 . . 2 2 S S e e r r v v i i c c e e A A c c t t i i v v a a t t i i o o n n W W i i z z a a r r d d Service Activation Wizard can guide you to activate WCF service (Web Content Filter) with a quick and easy way. For the Service Activation Wizard is only available for admin operation, therefore, please type “[...]

Vigor2120 Series User’s Guide 41 3. In the following page, you can activate the We b content filter services at the same time or individually. When you finish the selection, please click Next . Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek&ap[...]

Vigor2120 Series User’s Guide 42 5. Wait for a moment till the following page appears. When such page appears, you can enable or disable these services for your necessity. Then, click Finish. Note: The service will be activated and applied as the default rule configured in Firewall>>General Setup . 6. Now, the web page will display the serv[...]

Vigor2120 Series User’s Guide 43 2 2 . . 3 3 V V P P N N C C l l i i e e n n t t W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN client. Such wizard will guide to set the LAN-to-LAN profile for VPN dial out connec tion (from server to client) step by step. 1. Open VPN and Remote Access>>VPN Client Wizard . The [...]

Vigor2120 Series User’s Guide 44 2. When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making the choices for the client profil[...]

Vigor2120 Series User’s Guide 45 Note: The following descriptions for VPN Type are based on the Route Mode specified in LAN-to-LAN Client Mode Selection.  When you choose PPTP (None Encryption) or PPTP (Encryption) , you will see the following graphic:  When you choose IPsec , you will see the following graphic:[...]

Vigor2120 Series User’s Guide 46  When you choose L2TP , you will see the following graphic:  When you choose L2TP over IPsec (Nice to Have) or L2TP over IPsec (Must), you will see the following graphic:[...]

Vigor2120 Series User’s Guide 47 Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. Always On Check to enable router always keep VPN connection. Server IP/Host Name for VPN Type the IP address of the server or type the host name for such VPN [...]

Vigor2120 Series User’s Guide 48 Available settings are explained as follows: Item Description Go to the VPN Connection Management Click this radio button to access VPN and Remote Access>>Connection Management for viewing VPN Connection status. Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server t[...]

Vigor2120 Series User’s Guide 49 2 2 . . 4 4 V V P P N N S S e e r r v v e e r r W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connec tion (from client to server) step by step. 1. Open VPN and Remote Access>>VPN Server Wi zard . The [...]

Vigor2120 Series User’s Guide 50 Please choose a Dial-in User Accounts This item is available when you choose Remote Dial-in User (Teleworker) as VPN server mode. There are 32 VPN tunnels for users to set. Allowed Dial-in Type This item is available after you choose any one of dial-in user account profiles. Next, you have to select suitable dial-[...]

Vigor2120 Series User’s Guide 51  When you check PPTP , you will see the following graphic:  When you check PPTP & IPsec & L2TP (three types) or PPTP & IPsec (two types) or L2TP with Policy (Nice to Have/Must) , you will see the following graphic:[...]

Vigor2120 Series User’s Guide 52  When you check IPsec , y ou will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. User Name This field is used to authenticate for connection when you select PPTP or L2TP with [...]

Vigor2120 Series User’s Guide 53 Remote Network IP Please type one LAN IP address (according to the real location of the remote host) for building VPN connection. Remote Network Mask Please type the network mask (according to the real location of the remote host) for building VPN connection. 3. After finishing the configuration, please click Next[...]

Vigor2120 Series User’s Guide 54 2 2 . . 5 5 R R e e g g i i s s t t e e r r i i n n g g V V i i g g o o r r R R o o u u t t e e r r You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the st[...]

Vigor2120 Series User’s Guide 55 Notice: If you haven’t an accessing account, please refer to section 3.5 Creating an Account for MyVigor on this Guide to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account. 4 The following page will be displayed after you logging in MyVig[...]

Vigor2120 Series User’s Guide 56 6 When the following page appears, your r outer information has been added to the database. 7 After clicking OK , you will see the following page. Your router has been registered to myvigor website successfully.[...]

Vigor2120 Series User’s Guide 57 T T u u t t o o r r i i a a l l s s a a n n d d A A p p p p l l i i c c a a t t i i o o n n s s 3 3 . . 1 1 H H o o w w t t o o c c o o n n f f i i g g u u r r e e s s e e t t t t i i n n g g s s f f o o r r I I P P v v 6 6 S S e e r r v v i i c c e e i i n n V V i i g g o o r r 2 2 1 1 2 2 0 0 Due to the shortage[...]

Vigor2120 Series User’s Guide 58 2. In the following figure, use the drop down list to choo se a proper connection type. Different connection types will bring out di fferent configuration page. Refer to the following:  PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same time Choose PPP and type the information fo[...]

Vigor2120 Series User’s Guide 59 Click OK and open Online Status . If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time.[...]

Vigor2120 Series User’s Guide 60  TSPC – Tunnel application, both IPv6 hosts communicate through IPv4 network Choose TSPC and type the information for TSPC service. Note: While using such mode, you have to ma ke sure the IPv4 network connection is normal. (In the following figure, the TSPC inform ation is obtained from http://gogo6.com/ afte[...]

Vigor2120 Series User’s Guide 61  AICCU – Tunnel application Choose AICCU and type the information for AICCU of IPv6. Note: While using such mode, you have to ma ke sure the IPv4 network connection is normal. (In the following figure, the AICC U information is obtained from https://www.sixxs.net/main/ after applied for the service.) Click OK[...]

Vigor2120 Series User’s Guide 62  DHCPv6 Client Choose DHCPv6 Client. Click one of the identity associations and type the IAID number. Click OK and open Online Status . If the connection is successful, the physical connection will be shows as follows:[...]

Vigor2120 Series User’s Guide 63  Static IPv6 Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address. Click OK and open Online Status . If the connection is successful, the physical connection will be shows as follows:[...]

Vigor2120 Series User’s Guide 64 I I I I . . C C o o n n f f i i g g u u r r i i n n g g t t h h e e L L A A N N S S e e t t t t i i n n g g s s After finished the WAN settings for IPv6, pl ease configure the LAN settings to make the router’s client getting the IPv6 address. 1. Access into the web user interface of Vigor2120. Open LAN >> [...]

Vigor2120 Series User’s Guide 65 I I I I I I . . C C o o n n f f i i r r m m i i n n g g I I P P v v 6 6 S S e e r r v v i i c c e e R R u u n n S S u u c c c c e e s s s s f f u u l l l l y y 1. Make sure you have get the correct IPv6 IP address. Get into MS-DOS interface and type the command of “ipconfig”. Refer to the following figure. Fro[...]

Vigor2120 Series User’s Guide 66 3. Connect to the website for IPv6. Open a web browser and type an URL of IPv6, e.g., www.kame.net . If your computer accesses into th e website by using IPv6 address, you may see a turtle dancing on the screen. If not, only a steady turtle will be seen. If you can see a turtle dancing on the screen, that means IP[...]

Vigor2120 Series User’s Guide 67 3 3 . . 2 2 H H o o w w c c a a n n I I g g e e t t t t h h e e f f i i l l e e s s f f r r o o m m U U S S B B s s t t o o r r a a g g e e d d e e v v i i c c e e c c o o n n n n e e c c t t i i n n g g t t o o V V i i g g o o r r r r o o u u t t e e r r ? ? Files on USB storage device can be reviewed by opening [...]

Vigor2120 Series User’s Guide 68 4. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1 . Use the account " user1 " to login. 5. When the following screen appears, it means the FTP service is running properly. 6. Return to USB Application >> USB Disk Status . The information for FTP serv[...]

Vigor2120 Series User’s Guide 69 Now, users in LAN of Vigor2120 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. 3 3 . . 3 3 H H o o w w t t o o B B u u i i l l d d a a[...]

Vigor2120 Series User’s Guide 70 4. Now navigate to the next section, Dial-In Settings to check PPTP, IPsec Tunnel and L2TP boxes. Check the box of Specify Remote… and type the Peer VPN Server IP (e.g., 218.242.130.19 in this case). Press the IKE Pre-Shared Key button to set the PSK ; and select Medium (AH) or High (ESP) as the security method.[...]

Vigor2120 Series User’s Guide 71 7. Open VPN and Remote Access >>Connection Management to check the dial-in connection status (from branch office). C C o o n n f f i i g g u u r r a a t t i i o o n n o o n n V V i i g g o o r r R R o o u u t t e e r r f f o o r r B B r r a a n n c c h h O O f f f f i i c c e e 1. Log into the web user inter[...]

Vigor2120 Series User’s Guide 72 4. Now navigate to the next section, Dial-Out Settings to select the IPsec Tunnel service and type the remote server IP/host name (e.g., 218.242 .133.91, in this case). Press the IKE Pre-Shared Key button to set the PSK ; and select Medium (AH) or High (ESP) as the security method. 5. Continue to navigate to the T[...]

Vigor2120 Series User’s Guide 73 7. Open VPN and Remote Access >>Connection Management to check the dial-in connection status (from head office).[...]

Vigor2120 Series User’s Guide 74 3 3 . . 4 4 H H o o w w t t o o O O p p t t i i m m i i z z e e t t h h e e B B a a n n d d w w i i d d t t h h t t h h r r o o u u g g h h Q Q o o S S T T e e c c h h n n o o l l o o g g y y Have you ever gotten any problems in uplo ading/downloading files ( Voice, video or email/data only) with the narrow/distri[...]

Vigor2120 Series User’s Guide 75 5. In the pop-up window, choose Range Address as the Address Type and type the start IP address and end IP address in relational fields. Click OK to save the settings and exit the window. 6. Click OK again to save the settings.[...]

Vigor2120 Series User’s Guide 76 7. The class rule for VoIP has been set. Click OK to return to previous page. 8. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. a n d[...]

Vigor2120 Series User’s Guide 77 9. Assuming you get 2MB/512Kb Internet line. You can click the Setup link of WAN1 to set up the bandwidth for different groups am ong VoIP, IPTV and Data/Email. 10. In the Setup page, check the box of Enable the QoS Control . Type 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Ema il respectively. Check the bo[...]

Vigor2120 Series User’s Guide 78 11. Click OK to save the settings. The class rules fo r WAN1 are defined as shown below.[...]

Vigor2120 Series User’s Guide 79 3 3 . . 5 5 H H o o w w t t o o C C r r e e a a t t e e a a n n A A c c c c o o u u n n t t f f o o r r M M y y V V i i g g o o r r The website of MyVigor (a server located on http://myvigor.draytek.com ) pro vides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filteri[...]

Vigor2120 Series User’s Guide 80 2. Click the Activate link. A login page for MyVigor we b site will pop up automatically. 3. Click the link of Create an account now . 4. Check to confirm that you accept the Agreement and click Accept .[...]

Vigor2120 Series User’s Guide 81 5. Type your personal information in this page and then click Continue . 6. Choose proper selection for your computer and click Continue . 7. Now you have created an account successfully. Click START.[...]

Vigor2120 Series User’s Guide 82 8. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the re gister process is finished. Please click Login . 10. When you see the[...]

Vigor2120 Series User’s Guide 83 3 3 . . 5 5 . . 2 2 C C r r e e a a t t e e a a n n A A c c c c o o u u n n t t v v i i a a M M y y V V i i g g o o r r W W e e b b S S i i t t e e 1. Access into http://myvigor.draytek.com . Find the line of Not registered yet? . Then, click the link Click here! to access into next page. 2. Check to confirm that [...]

Vigor2120 Series User’s Guide 84 3. Type your personal information in this page and then click Continue . 4. Choose proper selection for your computer and click Continue . 5. Now you have created an account successfully. Click START.[...]

Vigor2120 Series User’s Guide 85 6. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the re gister process is finished. Please click Login . 8. When you see the [...]

Vigor2120 Series User’s Guide 86 3 3 . . 6 6 H H o o w w t t o o S S e e n n d d a a N N o o t t i i f f i i c c a a t t i i o o n n t t o o S S p p e e c c i i f f i i e e d d P P h h o o n n e e N N u u m m b b e e r r v v i i a a S S M M S S S S e e r r v v i i c c e e i i n n W W A A N N D D i i s s c c o o n n n n e e c c t t i i o o n n Fol[...]

Vigor2120 Series User’s Guide 87 4. After finished the settings, click OK to return to previous page. Now you have finished the configuration of the SMS Provider profile setting. 5. Open Object Settings>>Notification Object to configure the event conditions of the notification. 6. Choose any index number (e.g., Index 1 in th is case) to con[...]

Vigor2120 Series User’s Guide 88 7. After finished the settings, click OK to return to previous page. You have finished the configuration of the notification object profile setting. 8. Now, open Application >> SMS / Mail Alert Service . Use the drop down list to choose SMS Provider and the Notify Profile (specify the time of sending SMS). T[...]

Vigor2120 Series User’s Guide 89 R R e e m m a a r r k k : : H H o o w w t t h h e e c c u u s s t t o o m m i i z z e e t t h h e e S S M M S S P P r r o o v v i i d d e e r r Choose one of the Index numbers (9 or 10) allowing you to custom ize the SMS Provider. In the web page, type the URL string of the SMS provider and type the username and p[...]

Vigor2120 Series User’s Guide 90 3 3 . . 7 7 H H o o w w t t o o C C o o n n f f i i g g u u r r e e C C e e r r t t a a i i n n C C o o m m p p u u t t e e r r s s A A c c c c e e s s s s i i n n g g t t o o I I n n t t e e r r n n e e t t We can specify certain computers (e.g., 192.168.1.10 ~ 192.168.1.20) accessing to Internet through Vigor ro[...]

Vigor2120 Series User’s Guide 91 3. Check the box of Check to enable the Filter Rule . Type the comments (e.g., block_all ). Choose Block If No Further Match for the Filter setting. Then, click OK . Note: In default, the router will check the pack ets starting with Set 2, Filter Rule 2 to Filter Rule 7. If Block If No Further Match for is selecte[...]

Vigor2120 Series User’s Guide 92 6. A dialog box will be popped up. Choose Range Address as Address Type by using the drop down list. Type 192.168.1. 10 in the field of Start IP , and t ype 192.168.1.20 in the field of End IP . Then, click OK to save the settings. The com puters within the range can access into the Internet. 7. Now, check the con[...]

Vigor2120 Series User’s Guide 93 8. Both filter rules have been created. Click OK . 9. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168. 1.20 can access to Internet.[...]

Vigor2120 Series User’s Guide 94 3 3 . . 8 8 H H o o w w t t o o B B l l o o c c k k F F a a c c e e b b o o o o k k S S e e r r v v i i c c e e A A c c c c e e s s s s e e d d b b y y t t h h e e U U s s e e r r s s v v i i a a W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r / / U U R R L L C C o o n n t t e e n n t t F F i i l l[...]

Vigor2120 Series User’s Guide 95 2. Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action , Block . 3. Enable this profile in Firewall>>General Setup>>Default Rule .[...]

Vigor2120 Series User’s Guide 96 4. Next time when someone accesses facebook vi a this router, the web page would be blocked and the following message would be displayed instead. I I I I . . V V i i a a U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r A. Block the web page containing the word of “Facebook” 1. Open Object Settin[...]

Vigor2120 Series User’s Guide 97 5. When you finished th e above steps, click OK . Then, open Firewall>>General Setup . 6. Click the Default Rule tab. Choose the profile just configured from the drop dow n list in the field of URL Content Filter . Now, users cannot open any web page with the word “facebook” inside. B. Disallow users to [...]

Vigor2120 Series User’s Guide 98 3. Open CSM>>URL Content Filter Profile . Click an index number to open the setting page. 4. Configure the settings as the following figure. 5. When you finished the above steps, please open Firewall>>General Setup .[...]

Vigor2120 Series User’s Guide 99 6. Click the Default Rule tab. Choose the profile just configured from the drop dow n list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside.[...]

Vigor2120 Series User’s Guide 100 3 3 . . 9 9 H H o o w w t t o o u u s s e e S S m m a a r r t t M M o o n n i i t t o o r r w w i i t t h h V V i i g g o o r r 2 2 1 1 2 2 0 0 s s e e r r i i e e s s For the models that support SmartMonitor, you can connect the de vice installed with SmartMonitor to the monitor port of Vigor router, the n all t[...]

Vigor2120 Series User’s Guide 101 A A d d v v a a n n c c e e d d C C o o n n f f i i g g u u r r a a t t i i o o n n This chapter will guide users to execute adva nced (full) configuration thr ough admin mode operation. 1. Open a web browser on your PC and type http://192. 168.1.1. The window will ask for typing username and password. 2. Please [...]

Vigor2120 Series User’s Guide 102 From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 W W h h a a t t a a r r e e P P u u b b l l i i c c I I P P A A d d d d r r e e s s s s a a n n d d P P r r i i v v a a t t e e I I P P A A d d d d r r e e s s s s As the router plays a role to manage and further[...]

Vigor2120 Series User’s Guide 103 when WAN1 and WAN2 are not available, the router will use 3.5G for supporting automatically. The supported 3G USB Modem w ill be listed on DrayTek web site. Please visit www.draytek.com for more detailed information. Below shows the menu items for WAN . 4 4 . . 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t [...]

Vigor2120 Series User’s Guide 104 VLAN Tag insertion Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the WAN while sending them out. Please type the tag value and specify the priority for the packets sending by WAN1. Disable – Disable the function of VLAN with tag. Tag value – Type t[...]

Vigor2120 Series User’s Guide 105 4 4 . . 1 1 . . 3 3 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports multi-WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to diffe rent Physical Mode for WAN interface, the Access Mode for these connections also va ries. Refer to the [...]

Vigor2120 Series User’s Guide 106 4 4 . . 1 1 . . 3 3 . . 1 1 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E i i n n W W A A N N 1 1 To use PPPoE as the accessing protocol of the internet, please click the PPPoE tab. The following web page will be shown. Available settings are explained as follows: Item Description PP[...]

Vigor2120 Series User’s Guide 107 to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. MTU It means Max Transmit Unit for packet. The default setting is 1492. PPPoE [...]

Vigor2120 Series User’s Guide 108 Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address . Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address f or the router ma[...]

Vigor2120 Series User’s Guide 109 Available settings are explained as follows: Item Description Broadband Access Click Enable for activating this function. If you click Disable , this function will be closed and all the settings that you adjusted in this page will be invalid. Keep WAN Connection Normally, this function is designed for Dynamic IP [...]

Vigor2120 Series User’s Guide 110 MTU It means Max Transmit Unit for packet. RIP Protocol Routing Information Protocol is abbreviated as RIP （ RFC1058 ） specifying how routers exchange routing tables information. Click Enable RIP for activating this function. WAN IP Network Settings This group allows you to obtain an IP address automatically [...]

Vigor2120 Series User’s Guide 111  Subnet Mask : Type the subnet mask.  Gateway IP Address : Type the gateway IP address. Default MAC Address : Click this radio button to use default MAC address for the router. Specify a MAC Address : Some Cable service providers specify a specific MAC address for acce ss authentication. In such cases you n[...]

Vigor2120 Series User’s Guide 112 Specify Gateway IP Address – Specify the gateway IP address for DHCP server. ISP Access Setup Username -Type in the username provided by ISP in this field. The maximum length of the user nam e you can set is 63 characters. Password -Type in the password provided by ISP in this field. The maximum length of the p[...]

Vigor2120 Series User’s Guide 113 4 4 . . 1 1 . . 3 3 . . 4 4 D D e e t t a a i i l l s s P P a a g g e e f f o o r r 3 3 G G / / 4 4 G G U U S S B B M M o o d d e e m m ( ( P P P P P P m m o o d d e e ) ) i i n n W W A A N N 2 2 To use 3G/4G USB Modem (PPP mode) as the accessing protocol of the internet, please choose Internet Access from WAN me[...]

Vigor2120 Series User’s Guide 114 APN Name APN means Access Point Name which is provided and required by some ISPs. Type the name and click Apply . The maximum length of the name you can set is 43 characters. Modem Initial String2 The initial string 1 is shared with APN. In some cases, user may need another initial AT command to restrict 3G band [...]

Vigor2120 Series User’s Guide 115 4 4 . . 1 1 . . 3 3 . . 5 5 D D e e t t a a i i l l s s P P a a g g e e f f o o r r 3 3 G G / / 4 4 G G U U S S B B M M o o d d e e m m ( ( D D H H C C P P m m o o d d e e ) ) i i n n W W A A N N 2 2 To use 3G/4G USB Modem (DHCP mode) as the acce ssing protocol of the internet, please choose Internet Access from [...]

Vigor2120 Series User’s Guide 116 to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. After finishing all the settings here, please click OK to activate them. 4 4 .[...]

Vigor2120 Series User’s Guide 117 Below shows an example for successful IPv6 connection based on PPP mode. Note : At present, the IPv6 prefix can be acquired via the PPPo E mode connection which is available for the areas such as Taiwan (h inet), the Netherlands, Australia and UK.[...]

Vigor2120 Series User’s Guide 118 4 4 . . 1 1 . . 3 3 . . 8 8 D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P v v 6 6 – – T T S S P P C C i i n n W W A A N N 1 1 / / W W A A N N 2 2 Tunnel setup protocol client (TSPC) is an applica tion which could help you to connect to IPv6 network easily. Please make sure your IPv4 WAN conn[...]

Vigor2120 Series User’s Guide 119 4 4 . . 1 1 . . 3 3 . . 9 9 D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P v v 6 6 – – A A I I C C C C U U i i n n W W A A N N 1 1 / / W W A A N N 2 2 Available settings are explained as follows: Item Description Always On Check this box to keep the network connection always. Username Type th[...]

Vigor2120 Series User’s Guide 120 4 4 . . 1 1 . . 3 3 . . 1 1 0 0 D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P v v 6 6 – – D D H H C C P P v v 6 6 C C l l i i e e n n t t i i n n W W A A N N 1 1 DHCPv6 client mode would use DHCPv6 protocol to obtain IPv6 address from server. Available settings are explained as follows: Item[...]

Vigor2120 Series User’s Guide 121 4 4 . . 1 1 . . 3 3 . . 1 1 1 1 D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P v v 6 6 – – S S t t a a t t i i c c I I P P v v 6 6 i i n n W W A A N N 1 1 This type allows you to setup sta tic IPv6 address for WAN interface. Available settings are explained as follows: Item Description Static[...]

Vigor2120 Series User’s Guide 122 4 4 . . 1 1 . . 3 3 . . 1 1 2 2 D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P v v 6 6 – – 6 6 i i n n 4 4 S S t t a a t t i i c c T T u u n n n n e e l l i i n n W W A A N N 1 1 This type allows you to setup 6in4 Static Tunnel for WAN interface. Such mode allows the router to access IPv6 net[...]

Vigor2120 Series User’s Guide 123 Below shows an example for successful IPv6 c onnection based on 6in4 Static Tunnel mode.[...]

Vigor2120 Series User’s Guide 124 4 4 . . 1 1 . . 3 3 . . 1 1 3 3 D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P v v 6 6 – – 6 6 r r d d i i n n W W A A N N 1 1 This type allows you to setup 6rd for WAN interface. Available settings are explained as follows: Item Description 6rd Mode Auto 6rd – Retrieve 6rd prefix automa ti[...]

Vigor2120 Series User’s Guide 125 Below shows an example for successful IPv6 connection based on 6rd mode.[...]

Vigor2120 Series User’s Guide 126 4 4 . . 1 1 . . 4 4 M M u u l l t t i i - - V V L L A A N N Multi-VLAN allows users to create profil es for specific WAN interface and bridge connections for user applications that requi re very high network through put. Simply go to WAN and select Multi-VLAN . G G e e n n e e r r a a l l This page shows the basi[...]

Vigor2120 Series User’s Guide 127 Available settings are explained as follows: Item Description Multi-VLAN Channel (6~8) Enable – Click it to enable the configuration of this channel. Disable – Click it to disable the configuration of this channel. WAN Type The connections and interfaces created in every channel may select a specific WAN type[...]

Vigor2120 Series User’s Guide 128 Available settings are explained as follows: Item Description Multi-VLAN Channel (3~5) Enable – Click it to enable the configuration of this channel. Disable – Click it to disable the configuration of this channel. WAN Type The connections and interfaces created in every channel may select a specific WAN type[...]

Vigor2120 Series User’s Guide 129 traffic flowing on each channel will be identified by the system via their VLAN Tags. Channels using the same WAN type may not configure the same VLAN tag value. Priority – Choose the number to determine the packet priority for such VLAN. The range is from 0 to 7. Open Port-based Bridge Connection for this Chan[...]

Vigor2120 Series User’s Guide 130 4 4 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what type of public IP addresses co ming from your ISP . 4 4 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router i[...]

Vigor2120 Series User’s Guide 131 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the [...]

Vigor2120 Series User’s Guide 132 4 4 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . There are two subnets provided by the router whic h allow users to divide groups into different subnets (LAN1 – LAN2). In ad[...]

Vigor2120 Series User’s Guide 133 Advanced When the router receives the DHCP request from LAN client, the router will assign an IP with the DHCP packets adding option number and data inform ation. Enable – Check the box to enable the function of DHCP Option. Each DHCP option is composed by an option number with data. For example, Option number:[...]

Vigor2120 Series User’s Guide 134 4 4 . . 2 2 . . 2 2 . . 1 1 D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 1 1 – – E E t t h h e e r r n n e e t t T T C C P P / / I I P P a a n n d d D D H H C C P P S S e e t t u u p p There are two configuration pages for LAN1 , Ethernet TCP/IP and DHCP Setup (based on IPv4) and IPv6 S[...]

Vigor2120 Series User’s Guide 135 every host in the LAN. Enable Relay Agent – Specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to. DHCP Server IP Address – It is available when Enable Relay Agent is checked. Set the IP address of the DHCP server you are going to use so the Relay Agent can help [...]

Vigor2120 Series User’s Guide 136 If both the Primary IP and Secondary IP Address fields are left empty , the router will assign its own IP address to local users as a DNS proxy server and maintain a DNS cache. If the IP address of a do main name is already in the DNS cache, the router will resolve the domain name immediately . Otherwise, the rou[...]

Vigor2120 Series User’s Guide 137 Available settings are explained as follows: Item Description Router Advertisement Server Enable – Click it to enable router advertisement server. The router advertisement daemon sends Router Advertisement messages, specified by RFC 2461, to a local Ethernet LAN periodically and when requested by a node sending[...]

Vigor2120 Series User’s Guide 138 4 4 . . 2 2 . . 3 3 S S t t a a t t i i c c R R o o u u t t e e Go to LAN to open setting page and choose Static Route . The router offers IPv4 and IPv6 for you to configure the static route. Both protocols bring different web pages. S S t t a a t t i i c c R R o o u u t t e e f f o o r r I I P P v v 4 4 Availabl[...]

Vigor2120 Series User’s Guide 139 Click any underline of index number to get the follow ing page. Available settings are explained as follows: Item Description Enable Check it to enable this profile. Destination IP Address T ype an IP address as the destination of such static route. Subnet Mask T ype the subnet mask for such static route. Gateway[...]

Vigor2120 Series User’s Guide 140 S S t t a a t t i i c c R R o o u u t t e e f f o o r r I I P P v v 6 6 You can set up to 40 profiles for IPv6 static route. Click the IPv6 tab to o pen the following page: Each item is explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. [...]

Vigor2120 Series User’s Guide 141 Destination IPv6 Address / Prefix Len T ype the IP address with the prefix length for this entry . Gateway IPv6 Address T ype the gateway address for this entry . Network Interface Use the drop down list to specify an interface for this static route. After finishing all the settings here, please click OK to save [...]

Vigor2120 Series User’s Guide 142 1. Go to LAN page and click General Setup , select 1st Subnet as the RIP Protocol Control. Then click the OK button. Note: There are two reasons that we have to appl y RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subne[...]

Vigor2120 Series User’s Guide 143 4. Go to Diagnostics and choose Routing T able to verify current routing table. 4 4 . . 2 2 . . 4 4 V V L L A A N N With the 4-port Gigabit switch on the LAN side, Vigor router provides extremely high speed connectivity for the highest speed local data tr ansfer of any server or local PCs. On the Wireless-equippe[...]

Vigor2120 Series User’s Guide 144 Note: Settings in this page only applied to LAN port but not W AN port. Available settings are explained as follows: Item Description Enable Click it to enable VLAN configuration. LAN P1 – P4 – Check the LAN port(s) to be grouped under the selected VLAN. Wireless LAN (2.4GHz) SSID1 – SSID4 – Check the SSI[...]

Vigor2120 Series User’s Guide 145 VLAN Tag Enable – Check the box to enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the LAN while sending them out. Please type the tag value and specify the priority for the packets sending by LAN. VID – Type the value as the VLAN ID number. The range is form 0[...]

Vigor2120 Series User’s Guide 146 4 4 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthening co ntrol in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC addr[...]

Vigor2120 Series User’s Guide 147 Refresh Refresh the ARP table listed below to obtain the newest ARP table information. Add or Update IP Address – Type the IP address that will be used for the specified MAC address. Mac Address – Type the MAC address that is used to bind with the assigned IP address. Comment – Type a brief description for [...]

Vigor2120 Series User’s Guide 148 4 4 . . 2 2 . . 6 6 L L A A N N P P o o r r t t M M i i r r r r o o r r LAN port mirror can be applied for the users in LAN. Generally speaking, this function copies traffic from one or more specific ports to a target port. This mechanism helps manager track the network errors or abnormal packets transm ission wi[...]

Vigor2120 Series User’s Guide 149 4 4 . . 2 2 . . 7 7 W W e e b b P P o o r r t t a a l l S S e e t t u u p p This page allows you to confi gure a profile with specified URL for accessing into or display a message when a wireless/LAN user co nnects to In ternet through this router. No matter what the purpose of the wireless/LAN client is, he/she [...]

Vigor2120 Series User’s Guide 150 To configure the profile, click any inde x number link to open t he following page. Available settings are explained as follows: Item Description Disable Click this button to close this function. URL Redirect Any user who wants to access into Internet through this router will be redirected to the URL specified he[...]

Vigor2120 Series User’s Guide 151 4 4 . . 3 3 N N A A T T Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that one or more private IP a ddresses can be mapped into a single public one. Public IP address is usually assigned by your ISP, for which you may get charged. Private IP addresses are recognized[...]

Vigor2120 Series User’s Guide 152 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-m apping entries for the internal hosts. Each item is explained as follows: Item Description Index Display the number of the profil[...]

Vigor2120 Series User’s Guide 153 Protocol Display the transport layer protocol (TCP or UDP). Public Port Display the port number which will be redirected to the specified Private IP and Port of the internal host. Private IP Display the IP address of the internal host providing the service. Status Display if the profile is enabled (v) or not (x).[...]

Vigor2120 Series User’s Guide 154 Private IP Specify the private IP address of the internal host providing the service. If you choose Range as the port redirection mode, you will see two boxes on this field. Type a complete IP address in the first box (as the starting point). The second one will be assigned automatically later. Private Port Speci[...]

Vigor2120 Series User’s Guide 155 4 4 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (A H), do not travel on a fixed po[...]

Vigor2120 Series User’s Guide 156 Available settings are explained as follows: Item Description Choose Private IP or Active True IP first. Active True IP selection is available for WAN1 only. Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this button and then a window will autom atically[...]

Vigor2120 Series User’s Guide 157 If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN interface , you will find them in Aux. WAN IP for your selection. Available settings are explained as follows: Item Description Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ hos[...]

Vigor2120 Series User’s Guide 158 4 4 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application[...]

Vigor2120 Series User’s Guide 159 Available settings are explained as follows: Item Description Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that w ill be used for this entry. WAN IP Specify the WAN IP address that will be used for this entry[...]

Vigor2120 Series User’s Guide 160 After finishing all the settings here, please click OK to save the configuration. 4 4 . . 3 3 . . 4 4 A A d d d d r r e e s s s s M M a a p p p p i i n n g g Address Mapping is used to map a specified private IP or a range of private IPs of NAT subnet into a specified WAN IP (or WAN IP alias IP). Refer to the fol[...]

Vigor2120 Series User’s Guide 161 Available settings are explained as follows: Item Description Index Indicate the relative number for the particular entry that you want to configure You should click the appropriate index number to edit or clear the corresponding entry. Protocol Display the protocol used for this address mapping. Public IP Displa[...]

Vigor2120 Series User’s Guide 162 Protocol Specify the transport layer protocol. It could be TCP , UDP , or ALL for selection. WAN Interface Choose the WAN interface for such address mapping profile. WAN IP This is the source IP of a packet captured on the WAN side and sent by a NAT host specified in the Private IP field. The drop down menu conta[...]

Vigor2120 Series User’s Guide 163 Available settings are explained as follows: Item Description Comment Display the text which memorizes the application of this rule. Triggering Protocol Display the protocol of the triggering packets. Triggering Port Display the port of the triggering packets. Incoming Protocol Display the protocol for the incomi[...]

Vigor2120 Series User’s Guide 164 Available settings are explained as follows: Item Description Enable Check to enable this entry. Service Choose the predefined service to apply for such trigger profile. Comment Type the text to memorize the application of this rule. Triggering Protocol Select the protocol (TCP, UDP or TCP/UDP) for such triggerin[...]

Vigor2120 Series User’s Guide 165 4 4 . . 4 4 F F i i r r e e w w a a l l l l 4 4 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigo[...]

Vigor2120 Series User’s Guide 166 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a packet based on the information in its header, stateful inspec[...]

Vigor2120 Series User’s Guide 167 4 4 . . 4 4 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p General Setup allows you to adjust setti ngs of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter . Under some circumstance, your filter set can be linked to work in a serial manner. So here you assign th[...]

Vigor2120 Series User’s Guide 168 fragmented UDP or ICMP Packets ”. Enable S trict Security Firewall For the sake of security , the router will execute strict security checking for data transmission. Such feature is enabled in de fault. All the packets, while transmitting through Vigor router, will be filtered by firewall. If the firewall syste[...]

Vigor2120 Series User’s Guide 169 Available settings are explained as follows: Item Description Filter Select Pass or Block for the packets that do not match with the filter rules. Sessions Control The number typed here is the total sessions of the packets that do not match the filter rule configured in this page. The default setting is 60000. Qu[...]

Vigor2120 Series User’s Guide 170 strongly r ecommended to use the default settings here. Codepage - This function is used to com pare the characters among dif ferent languages. Choose correct codepage can help the system obtaining correct ASCII after decoding data from URL and enhance the correctness o f URL Content Filter . The de fault value f[...]

Vigor2120 Series User’s Guide 171 4 4 . . 4 4 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule num ber button to [...]

Vigor2120 Series User’s Guide 172 Available settings are explained as follows: Item Description Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index(1-15) Set PCs on LAN to work at certain time interval only. You may choose up to 4 sch[...]

Vigor2120 Series User’s Guide 173 LAN. Source/Destination IP Click Edit to access into the follo wing dialog to choose the source/destination IP or IP ranges. To set the IP address manually, please choose Any Address/Single Address/ Range Address/Subnet Address as the Address Type and type them in this dialog. In addition, if you want to use the [...]

Vigor2120 Series User’s Guide 174 addition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port – (=) – when the first and last value are the same, it indicates one port; when th[...]

Vigor2120 Series User’s Guide 175 MAC Bind IP Strict – Make the MAC address and IP address settings configured in IP Object for Source IP and Destination IP be bound for applying such filter rule. No-Strict - no limitation. Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, pl[...]

Vigor2120 Series User’s Guide 176 Codepage - This function is used to com pare the characters among dif ferent languages. Choose correct codepage can help the system obtaining correct ASCII after decoding data from URL and enhance the correctness o f URL Content Filter . The de fault value for this setting is ANSI 1252 Latin I. If you do not choo[...]

Vigor2120 Series User’s Guide 177 S trict Security Checking - For the sake of security , you might want the router executing strict security checking for data transmission. The router performance will be affected if you invoke strict security checking. APP Enforcement – Check this box to execute the critical checking for all the files transferr[...]

Vigor2120 Series User’s Guide 178 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is co mposed by 7 filter rules, which can b[...]

Vigor2120 Series User’s Guide 179 4 4 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Available settings[...]

Vigor2120 Series User’s Guide 180 will start to randomly discard the subsequent UDP packets for a period defined in Timeout. The default setting for threshold and timeout are 2000 packets per second and 10 seconds, respectively. That means, when 2000 packets per second received, they will be regarded as “attack event” and the session will be [...]

Vigor2120 Series User’s Guide 181 Any broadcast UDP packets received from the Internet is blocked. Activating the DoS/DDoS defense functionality might block some legal packets. For example, when you act ivate the fraggle attack defense, all broadcast UDP packets coming from the Internet are blocked. Therefore, the RIP packets from the Internet mi[...]

Vigor2120 Series User’s Guide 182 After finishing all the settings here, please click OK to save the configuration.[...]

Vigor2120 Series User’s Guide 183 4 4 . . 5 5 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/[...]

Vigor2120 Series User’s Guide 184 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface. For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range fo[...]

Vigor2120 Series User’s Guide 185 Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Subnet Mask Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the IP addresses except the ones listed above will be ap[...]

Vigor2120 Series User’s Guide 186 4 4 . . 5 5 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group pr[...]

Vigor2120 Series User’s Guide 187 Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or Any to display all the available IP objects with the specified interface. Available IP Objects All the available IP objects with the specified interface [...]

Vigor2120 Series User’s Guide 188 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index co lum n for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are a[...]

Vigor2120 Series User’s Guide 189 3. After finishing all the settings, please click OK to save the configuration. 4 4 . . 5 5 . . 4 4 I I P P v v 6 6 G G r r o o u u p p This page allows you to bind several IPv6 objects into one IPv6 group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. In[...]

Vigor2120 Series User’s Guide 190 Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Available IPv6 Objects All the available IPv6 objects with the specified interface chosen above will be shown in this box. Selected IPv6 Objects Click >> button to add the sele[...]

Vigor2120 Series User’s Guide 191 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile. Protocol Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port columns are available for TCP/UDP pro[...]

Vigor2120 Series User’s Guide 192 4 4 . . 5 5 . . 6 6 S S e e r r v v i i c c e e T T y y p p e e G G r r o o u u p p This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. N[...]

Vigor2120 Series User’s Guide 193 Item Description Name Type a name for this profile. Available Service Type Objects All the available service objects that you have added on Objects Setting>>Service Type Object will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box. 3. After[...]

Vigor2120 Series User’s Guide 194 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index co lum n for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile, e.g., game. Type a name for[...]

Vigor2120 Series User’s Guide 195 4 4 . . 5 5 . . 8 8 K K e e y y w w o o r r d d G G r r o o u u p p This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL /Web Content Filter Profile . Available settings are explained as follows: Item Description Se[...]

Vigor2120 Series User’s Guide 196 Item Description Name Type a name for this group. Maximum 15 characters are allowed. Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects Click button [...]

Vigor2120 Series User’s Guide 197 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Profile colum n for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Profile Name Type a name for this profile. The maximum length[...]

Vigor2120 Series User’s Guide 198 4 4 . . 5 5 . . 1 1 0 0 S S M M S S / / M M a a i i l l S S e e r r v v i i c c e e O O b b j j e e c c t t S S M M S S S S e e r r v v i i c c e e O O b b j j e e c c t t This page allows you to set ten profiles which will be applied in Application>>SMS/Mail Alert Service . Each item is explained as follow[...]

Vigor2120 Series User’s Guide 199 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Profile Name Type a name for such SMS profile. The maximum length of the name you can set is 31 characters. Service Provider Use the drop down list to specify the service provider which offers SMS ser[...]

Vigor2120 Series User’s Guide 200 C C u u s s t t o o m m i i z z e e d d S S M M S S S S e e r r v v i i c c e e Vigor router offers several SMS service provider to offer the SMS service. However, if your service provider cannot be found from the service provider list, si mply use Index 9 and Index 10 to make customized SMS service. The profile [...]

Vigor2120 Series User’s Guide 201 Username Type a user name that the sender can use to register to selected SMS provider. The maximum length of the name you can set is 31 characters. Password Type a password that the sender can use to register to selected SMS provider. The maximum length of the password you can set is 31 characters. Quota Type th[...]

Vigor2120 Series User’s Guide 202 To set a new profile, please do the steps listed below: 1. Click the Mail Server tab, and click the number (e.g ., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Profile Name Type a name for suc[...]

Vigor2120 Series User’s Guide 203 Sending Interval Define the interval for the system to send the SMS out. 3. After finishing all the settings here, please click OK to save the configuration. 4 4 . . 5 5 . . 1 1 1 1 N N o o t t i i f f i i c c a a t t i i o o n n O O b b j j e e c c t t This page allows you to set ten profiles which will be appli[...]

Vigor2120 Series User’s Guide 204 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Profile Name Type a name for such notification profile. The maximum length of the name you can set is 15 characters. Category Display the types that will be monitored. Status Display the status for th[...]

Vigor2120 Series User’s Guide 205 4 4 . . 6 6 C C S S M M C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n t t ( ( C C S S M M ) ) CSM is an abbreviation of Content Security Management which is used to control IM/P2P usage, filter the web content and URL conten t to reach a goal of security managemen[...]

Vigor2120 Series User’s Guide 206 4 4 . . 6 6 . . 1 1 A A P P P P E E n n f f o o r r c c e e m m e e n n t t P P r r o o f f i i l l e e You can define policy profiles for IM (Instan t Messenger)/P2P (Peer to Peer)/Protocol/Misc application. This page allows you to set 32 profiles for different requirements. The APP Enforcement Profile will be a[...]

Vigor2120 Series User’s Guide 207 Below shows the items which are categorized under Protocol . Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. The maximum length of the name you can set is 15 characters. Select All Click it to choose all of the items in this page. Clear All Uncheck all t[...]

Vigor2120 Series User’s Guide 208 4 4 . . 6 6 . . 2 2 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the ina ppropriate web sites but also prohibit other web feature wher[...]

Vigor2120 Series User’s Guide 209 your necessity or click this button to get the default message which will be displayed on the field of Administration Message . You can set eight profiles as URL content filter. Simply click the index num ber under Profile to open the following web page. Available settings are explained as follows: Item Descripti[...]

Vigor2120 Series User’s Guide 210 the router will process the pack ages with the conditions set below for web feature first, then URL second. Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass w ill be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All [...]

Vigor2120 Series User’s Guide 211 semicolon. In addition, the maximal length of each frame is 32-character long. After specifying keywords, the Vigor router will decline the connection request to the website whose URL string matched to any user-defined keyword. It should be noticed that the more sim plified the blocking keyword list is, the more [...]

Vigor2120 Series User’s Guide 212 After finishing all the settings, please click OK to save the configuration. 4 4 . . 6 6 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Fi[...]

Vigor2120 Series User’s Guide 213 Available settings are explained as follows: Item Description Activate Click it to access into MyVigor for activating WCF service. Setup Query Server It is recommended for you to use the default setting, auto-selected. You need to sp ecify a server for categorize searching when you type URL in browser based on th[...]

Vigor2120 Series User’s Guide 214 Cache None – the router will check the URL that the user wants to access via WCF precisely, however, the processing rate is normal. Such item can provide the m ost accurate URL matching. L1 – the router will check the URL that the user wants to access via WCF. If the URL has been accessed previously, it will [...]

Vigor2120 Series User’s Guide 215 Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. The maximum length of the name you can set is 15 characters. Black/White List Enable – Activate white/black list function for such profile. Group/Object Selections – Click Edit to choose the group or ob[...]

Vigor2120 Series User’s Guide 216 4 4 . . 6 6 . . 4 4 D D N N S S F F i i l l t t e e r r The DNS Filter monitors DNS queries on UDP port 53 and will pass the DNS query information to the WCF to help with categorizing HTTPS URL's. Note: For DNS filter must use the WCF service profile to filter the packets, therefore WCF license must be activ[...]

Vigor2120 Series User’s Guide 217 Service Set the filtering conditions. Specify one of the WCF profiles as Service. Choose the WCF profiles to apply DNS filter. Cache Time (hour) Set the time for DNS query. Enable Block Page If such function is enabled, when DNS packets are blocked by DNS filter, a web page containing the description listed on Ad[...]

Vigor2120 Series User’s Guide 218 4 4 . . 7 7 B B a a n n d d w w i i d d t t h h M M a a n n a a g g e e m m e e n n t t Below shows the menu items for Bandwidth Management. 4 4 . . 7 7 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router. The router will generate the [...]

Vigor2120 Series User’s Guide 219 session. Default session limit - Defines the default session number used for each computer in LAN. Limitation List Displays a list of specific limitations that you set on this web page. Specific Limitation Start IP- Defines the start IP address for limit session. End IP - Defines the end IP address for limit sess[...]

Vigor2120 Series User’s Guide 220 4 4 . . 7 7 . . 2 2 B B a a n n d d w w i i d d t t h h L L i i m m i i t t The downstream or upstream from FTP, HTTP or so me P2P applications will occupy large of bandwidth and affect the applications for othe r programs. Please use Limit Bandwidth to m ake the bandwidth usage more efficient. In the Bandwidth M[...]

Vigor2120 Series User’s Guide 221 downstream for each computer in LAN. Allow auto adjustment … - Check this box to make the best utilization of available bandwidth. Limitation List Display a list of specific limitations that you set on this web page. Specific Limitation Start IP - Define the start IP address for limit bandwidth. End IP - Define[...]

Vigor2120 Series User’s Guide 222 4 4 . . 7 7 . . 3 3 Q Q u u a a l l i i t t y y o o f f S S e e r r v v i i c c e e Deploying QoS (Quality of Service) management to guarantee that all applications receive the service levels required and sufficient bandwidth to meet performance expectations is indeed one important aspect of modern enterprise net[...]

Vigor2120 Series User’s Guide 223 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s eff[...]

Vigor2120 Series User’s Guide 224 You can configure general setup for the WAN interface, edit the Class Rule, and edit the Service Type for the Class Rule for your request. O O n n l l i i n n e e S S t t a a t t i i s s t t i i c c s s Display an online statistics for quality of service fo r y our reference. This feature is available only when t[...]

Vigor2120 Series User’s Guide 225 Available settings are explained as follows: Item Description Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN - apply to incoming traffic only. OUT - apply to outgoing traffic only. BOTH - apply to both incoming an[...]

Vigor2120 Series User’s Guide 226 E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S 1. The first three (Class 1 to Class 3) class rul es can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one. 2. After you click the Edit link, you will see the followi[...]

Vigor2120 Series User’s Guide 227 Available settings are explained as follows: Item Description ACT Check this box to invoke these settings. Ethernet Type Please specify which protocol (IPv4 or IPv6) will be used for this rule. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit but[...]

Vigor2120 Series User’s Guide 228 By the way, you can set up to 20 rules for one Class. If you want to edit an existed rule, please select the radio button of that one and clic k Edit to open the rule edit page for modification. E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e[...]

Vigor2120 Series User’s Guide 229 3. For adding a new service type, click Add to open the following pag e. Available settings are explained as follows: Item Description Service Name Type in a new service for your request. The maximum length of the name you can set is 11 characters. Service Type Choose the type (TCP, UDP or TCP/UDP or other) for t[...]

Vigor2120 Series User’s Guide 230 4 4 . . 7 7 . . 4 4 A A P P P P Q Q o o S S The QoS function is used to do bandwidth manage ment for the services with certain IP or port number. However, there is no effect of bandwidth managem ent on the service such as IM or P2P without fixed IP or por t number. APP QoS employs the function of APP Enforcement [...]

Vigor2120 Series User’s Guide 231 The following shows web page under Untraceable.[...]

Vigor2120 Series User’s Guide 232 Available settings are explained as follows: Item Description Enable/Disable Click Enable to activate APP QoS function. Click Disable to deactivate APP QoS function. Select All Click it to choose all of the items in this page. Clear All Uncheck all the selected boxes. Action The APP can be specified with differen[...]

Vigor2120 Series User’s Guide 233 Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles and recover to factory settings. Enable Dynamic DNS Setup Check this box to enable DDNS function. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server. Auto-Upd[...]

Vigor2120 Series User’s Guide 234 Available settings are explained as follows: Item Description Enable Dynamic DNS Account Check this box to enable the current account. If you did check the box, you will see a ch eck mark appeared on the Active column of the previous web page in step 2). Service Provider Select the service provider for the DDNS a[...]

Vigor2120 Series User’s Guide 235 router is private, it will be converted to public IP before DDNS update takes place. 4. Click OK button to activate the settings. You will see your setting has been saved. Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup , and push Clear All button t[...]

Vigor2120 Series User’s Guide 236 1. Click any index, say Index No. 1. 2. The detailed settings with index 1 are shown below . Available settings are explained as follows: Item Description Enable Check this box to enable such profile. Profile Type a name for such profile. Domain Name Type the domain name for such profile. IP Address List The IP a[...]

Vigor2120 Series User’s Guide 237 4. A new LAN DNS profile has been created. 4 4 . . 8 8 . . 3 3 S S c c h h e e d d u u l l e e The Vigor router has a built-in clock which can update itself manually or automatically by means of Network Time Protocols (NTP). As a result, you can not only schedule the router to dialup to the Internet at a specifie[...]

Vigor2120 Series User’s Guide 238 Status Display if this schedule setting is active or inactive. You can set up to 15 schedules. Then you can apply them to your Internet Acce ss or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule: 1. Click any index, say Index No. 1. 2. The detailed settings of the call sche dule with index 1[...]

Vigor2120 Series User’s Guide 239 Idle Timeout Specify the duration (or period) for the schedule. How often - Specify how often the schedule will be applied Once - The schedule will be applied just once Weekdays - Specify which days in one week should perform the schedule. 3. Click OK button to save the settings. Example Suppose you want to contr[...]

Vigor2120 Series User’s Guide 240 Item Description Enable Check to enable RADIUS client feature. Server IP Address Type the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138. Shared Secret The RADIUS server and client share a secret that is used to authen[...]

Vigor2120 Series User’s Guide 241 Security Considerations Activating the UPnP function on your network may incur some security threats. You should consider carefully these risks before activating the UPnP function.  Some Microsoft operating systems have f ound out the UPnP weaknesses and hence you need to ensure that you have applied th e late[...]

Vigor2120 Series User’s Guide 242 After finishing all the settings here, please click OK to save the configuration. 4 4 . . 8 8 . . 7 7 W W a a k k e e o o n n L L A A N N A PC client on LAN can be woken up by the router it connects. When a user wants to wake up a specified PC through the router, he/she must type correct MAC address of the specif[...]

Vigor2120 Series User’s Guide 243 4 4 . . 8 8 . . 8 8 S S M M S S / / M M a a i i l l A A l l e e r r t t S S e e r r v v i i c c e e The function of SMS (Short Message Service)/Mail Alert is that Vigor router sends a message to user’s mobile or e-mail box through specified service provider to assist the user knowing the real-time abnormal situ[...]

Vigor2120 Series User’s Guide 244 Recipient Type the name of the one who will receive the SMS. Notify Use the drop down list to choose a message profile. The recipient will get the content stated in the message profile. You can click the Notify Profile link to define the content of the SMS. Schedule Type the schedule number that the SMS will be s[...]

Vigor2120 Series User’s Guide 245 Schedule Type the schedule number that the notification will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. 4 4 . . 8 8 . . 9 9 B B o o n n j j o o u u r r Bonjour is a service discovery protocol which is[...]

Vigor2120 Series User’s Guide 246 3. Open System Maintenance>>Management . Type a name (e.g., Dray_2925) as the Router Name and click OK . 4. Next, open Applications>>Bonjour . Check the service that you want to use via Bonjour.[...]

Vigor2120 Series User’s Guide 247 5. Open the DNSSD page again. The available ite ms will be changed as the follows. It means the Vigor router (based on Bonjour protocol) is ready to be used as a printer server, FTP server, SSH Server, Telnet Server, and HTTP Server. 6. Now, any page or document can be printed out throug h Vigor router (installed[...]

Vigor2120 Series User’s Guide 248 4 4 . . 9 9 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Intern et. In short, by VPN technolog y, you can send data between two computers across a share[...]

Vigor2120 Series User’s Guide 249 4 4 . . 9 9 . . 2 2 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VP N connections, such as PPTP, L2TP, L2TP over IPsec. Available settings are explained as follows: Item Description Dial-In PPP Authentication PAP Only - elect this option to force the router [...]

Vigor2120 Series User’s Guide 250 Mutual Authentication (PAP) The Mutual Authentication function is mainly used to communicate with other routers or clients who need bi-directional authentication in order to provide stronger security, for example, Cisco routers. So you should enable this function when your peer router requires mutual authenticati[...]

Vigor2120 Series User’s Guide 251 4 4 . . 9 9 . . 3 3 I I P P s s e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPsec General Setup, there are two major parts of configuration. There are two phases of IPsec.  Phase 1: negotiation of IKE parameters including encryption, hash, Diffie-Hellman parameter values, and lifetime to protect[...]

Vigor2120 Series User’s Guide 252 from remote dial-in user, Certificate (X.509) and Pre-Shared Key . Certificate for Dial-in –Choose one of the local certificates from the drop down list. Pre-Shared Key- Specify a key for IKE authentication. Confirm Pre-Shared Key- Retype the characters to confirm the pre-shared key. Note : Any packets from the[...]

Vigor2120 Series User’s Guide 253 4 4 . . 9 9 . . 4 4 I I P P s s e e c c P P e e e e r r I I d d e e n n t t i i t t y y To use digital certificate for p eer authentication in either LAN-to-LAN connection or Remote User Dial-In connection, here you may edit a table of peer certificate for selectio n. As shown below, the router provides 32 entrie[...]

Vigor2120 Series User’s Guide 254 Available settings are explained as follows: Item Description Profile Name Type the name of the profile. The maximum length of the name you can set is 32 characters. Enable this account Check it to enable such account profile. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject [...]

Vigor2120 Series User’s Guide 255 4 4 . . 9 9 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via VPN connecti on. You may set parameters including specified connection peer ID, connection type (VPN[...]

Vigor2120 Series User’s Guide 256 Available settings are explained as follows: Item Description User account and Authentication Enable this account - Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 se[...]

Vigor2120 Series User’s Guide 257  Nice to Have - Apply the IPsec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection.  Must - Specify the IPsec policy to be definitely applied on the L2TP connection. SSL Tunnel – Allow the remote dial-in user to make an SSL VPN conn[...]

Vigor2120 Series User’s Guide 258 or without specifying the IP address of the remote node. Pre-Shared Key - Check the box of Pre-Shared Key to invoke this function and type in the required characters (1-63) as the pre-shared key. Digital Signature (X.509) – Check the box of Digital Signature to invoke this function and Select one predefined Pro[...]

[...]

Vigor2120 Series User’s Guide 260 Available settings are explained as follows: Item Description Common Settings Profile Name – Specify a name for the profile of the LAN-to-LAN connection. Enable this profile - Check here to activate this profile. Netbios Naming Packet  Pass – click it to have an inquiry for data transmission between the ho[...]

Vigor2120 Series User’s Guide 261 through the router.  Block – This is default setting. Click this button to let multicast packets be blocked by the router. Call Direction - Specify the allowed call direction of this LAN-to-LAN profile.  Both :-initiator/responder  Dial-Out - initiator only  Dial-In- responder only. Always On- Check[...]

Vigor2120 Series User’s Guide 262 applied on the L2TP connection. User Name - This field is applicable when you select, PPTP or L2TP with or without IPsec policy above. The length of the name is lim ited to 49 characters. Password - This field is applicable when you select PPTP or L2TP with or without IPsec policy above. The length of the passwor[...]

Vigor2120 Series User’s Guide 263  3DES with Authentication- Use triple DES encryption algorithm and apply MD5 or SHA-1 authentication algorithm.  AES without Authentication -Use AES encry ption algorithm and not apply any authentication scheme.  AES with Authentication- Use AES encryption algorithm and apply MD5 or SHA-1 authentication [...]

Vigor2120 Series User’s Guide 264 Index(1-15) - Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Available settings are explained as follows: Item De[...]

Vigor2120 Series User’s Guide 265 L2TP without IPsec policy can be viewed as one pure L2TP connection.  Nice to Have - Apply the IPsec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection.  Must - Specify the IPsec policy to be definitely applied on the L2TP connection.[...]

Vigor2120 Series User’s Guide 266 IPsec Tunnels and L2TP with IPsec Policy when you specify the remote node.  Medium- Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active.  High- Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You [...]

Vigor2120 Series User’s Guide 267 RIP Direction - The option specifies the direction of RIP (Routing Information Protoc ol) packets. You can enable/disable one of direc tion here. Herein, we provide four options: TX/RX Both, TX Only, RX Only, and Disable. From first subnet to remote network, you have to do - If the remote network only allows you [...]

Vigor2120 Series User’s Guide 268 4 4 . . 9 9 . . 7 7 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You m ay also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Available s[...]

Vigor2120 Series User’s Guide 269 4 4 . . 1 1 0 0 . . 1 1 L L o o c c a a l l C C e e r r t t i i f f i i c c a a t t e e Available settings are explained as follows: Item Description Generate Click this button to open G enerate Certificate Request window. Type in all the information that the window requests. Then click Generate again. Import Cli[...]

Vigor2120 Series User’s Guide 270 Note: Please be noted that “Common Name” must be configured with rotuer’s WAN IP or domain name. After clicking GENERATE , the generated information w ill be displayed on the window below: IMPORT Vigor router allows you to generate a certificate request and submit it the CA server, then import it as “Loca[...]

Vigor2120 Series User’s Guide 271 Available settings are explained as follows: Item Description Upload Local Certificate It allows users to import the certificate which is generated by Vigor router and signed by CA server. If you have done well in certificate generation, the Status of the certificate will be shown as “ OK ”. Upload PKCS12 Cer[...]

Vigor2120 Series User’s Guide 272 Note: You have to copy the certificate request information from above window. Next, access your CA server and enter the page of certificate request, copy the information into it and submit a request. A new certificate will be issued to you by the CA server. You can save it. D D e e l l e e t t e e Click this butt[...]

Vigor2120 Series User’s Guide 273 For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA cer tificate, choose the one and click Delete to rem ove all the certificate information.[...]

Vigor2120 Series User’s Guide 274 4 4 . . 1 1 0 0 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please typ[...]

Vigor2120 Series User’s Guide 275 4 4 . . 1 1 1 1 W W i i r r e e l l e e s s s s L L A A N N ( ( 2 2 . . 4 4 G G H H z z / / 5 5 G G H H z z ) ) This function is used for “ n/n-plus ” models only. 4 4 . . 1 1 1 1 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed[...]

Vigor2120 Series User’s Guide 276 M M u u l l t t i i p p l l e e S S S S I I D D s s Vigor router supports four SSID settings for wireless connections. Each SSID can be defined with different name and download/upload rate for selecting by stations connected to the route r wirelessly. S S e e c c u u r r i i t t y y O O v v e e r r v v i i e e w [...]

Vigor2120 Series User’s Guide 277 4 4 . . 1 1 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Available settings are explained as follows: Item Descript[...]

Vigor2120 Series User’s Guide 278 Channel Means the channel of frequency of the wireless LAN. The default channel is 6. You may switch channel if the selected channel is under serious inte rference. If you have no idea of choosing the frequency, please select Auto to let system determine for you. 2.4G 5G Hide SSID Check it to prevent from wireles[...]

Vigor2120 Series User’s Guide 279 4 4 . . 1 1 1 1 . . 3 3 S S e e c c u u r r i i t t y y This page allows you to set security with diffe rent modes for SSID 1, 2, 3 and 4 respectively. After configuring the correct settings, please click OK to save and invoke it. The password (PSK) of default security mode is provided and stated on the label pas[...]

Vigor2120 Series User’s Guide 280 Note: You should also set RADIUS Server simultaneously if 802.1x mode is selected. Disable - Turn off the encryption mechanism. WEP- Accepts only WEP clients and the encryption key should be entered in WEP Key. WEP/802.1x Only - Accepts only WEP clients and the encryption key is obtained dynamically from RADIUS s[...]

Vigor2120 Series User’s Guide 281 characters, such as ABCDEFGHIJ KLM (or 26 hexadecimal digits leading by 0x, such as 0x4142434445464 748494A4B4C4D). All wireless devices must support the same WEP encryption bit size and have the same key . Four ke ys can be entered here, but only one key can be selected at a time. The keys can be entered in ASCI[...]

Vigor2120 Series User’s Guide 282 4 4 . . 1 1 1 1 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l In the Access Control , the router may restrict wireless access to cert ain wireless clients only by locking their MAC address into a black or wh ite list. The user may block wireless clients by inserting their MAC addresses into a black [...]

Vigor2120 Series User’s Guide 283 Cancel Give up the access control set up. OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. After finishing all the settings here, please click OK to save the configuration. 4 4 . . 1 1 1 1 . . 5 5 W W P P S S WPS (Wi-Fi Protected Setup) provides easy procedure to m[...]

Vigor2120 Series User’s Guide 284  On the side of Vigor2120 series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card.  If you want to use PIN code, you have to know the P[...]

Vigor2120 Series User’s Guide 285 Below shows Wireless LAN>>WPS web page: Available settings are explained as follows: Item Description Enable WPS Check this box to enable WPS setting. WPS Status Display related system information for WPS. If the wireless security (encryption) function of the router is properly configured, you can see ‘Co[...]

Vigor2120 Series User’s Guide 286 4 4 . . 1 1 1 1 . . 6 6 W W D D S S WDS means Wireless Distribution System. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application:  Provide bridge traffic between two LANs through the air.  Extend the coverage range of a WLAN. To meet the ab[...]

Vigor2120 Series User’s Guide 287 The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be for warded to local wired or wireless hosts. In other words, only Repeater mod[...]

Vigor2120 Series User’s Guide 288 Available settings are explained as follows: Item Description Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Security There are three types for security, Disable , WEP and Pr[...]

Vigor2120 Series User’s Guide 289 digits leading by “0x”. Bridge If you choose Bridge as the connecting mode, please type in the peer MAC address in these fields. Four peer MAC addresses are allowed to be entered in this page at one time. Yet please disable the unused link to get better performance. If you want to invoke the peer MAC address,[...]

Vigor2120 Series User’s Guide 290 4 4 . . 1 1 1 1 . . 7 7 A A d d v v a a n n c c e e d d S S e e t t t t i i n n g g This page allows users to set advanced se ttings such as operation mode, channel bandwidth, guard interval, and aggregation MSDU for wireless data transmission. 2.4G 5G Available settings are explained as follows: Item Description[...]

Vigor2120 Series User’s Guide 291 Aggregation MSDU Aggregation MSDU can combine frames with different sizes. It is used for improving MAC layer’s performance for some brand’s clients. The default setting is Enable. Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short [...]

Vigor2120 Series User’s Guide 292 4 4 . . 1 1 1 1 . . 8 8 W W M M M M C C o o n n f f i i g g u u r r a a t t i i o o n n WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access categories derived from 802.1d (prioritization tabs). T he categories are designed with specific types of traffic, voice, video, best e[...]

Vigor2120 Series User’s Guide 293 Txop It means transmission opportunity. For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission, please set greater value for them to get highest transmission opportunity. Specify the value ranging from 0 to 65535. ACM It is an abbreviation of Admission control Mandatory. It can res[...]

Vigor2120 Series User’s Guide 294 4 4 . . 1 1 1 1 . . 9 9 A A P P D D i i s s c c o o v v e e r r y y Vigor router can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know which channel is clean for usage. Also, it can be used to facilitate finding an AP for a WDS li nk. Notice that [...]

Vigor2120 Series User’s Guide 295 4 4 . . 1 1 1 1 . . 1 1 0 0 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of connecting wire less clients now along with its status code. There is a code summary belo w for explanation. For convenient Access C ontrol , you can select a WLAN station and click Add to Access Control[...]

Vigor2120 Series User’s Guide 296 4 4 . . 1 1 1 1 . . 1 1 1 1 S S t t a a t t i i o o n n C C o o n n t t r r o o l l Station Control is used to specify the duration fo r the wireless client to connect and reconnect Vigor router. If such function is not enabled, th e wireless client can connect Vigor router until the router shuts down. Such featu[...]

Vigor2120 Series User’s Guide 297 modifying the settings if required. After finishing all the settings here, please click OK to save the configuration. 4 4 . . 1 1 2 2 S S S S L L V V P P N N An SSL VPN (Secure Sockets Layer virtual private network) is a form of VPN that can be sed with a standard Web browser. There are two benefits that SSL VPN [...]

Vigor2120 Series User’s Guide 298 4 4 . . 1 1 2 2 . . 2 2 S S S S L L A A p p p p l l i i c c a a t t i i o o n n It provides a secure and flexible solution fo r network resources, including VNC (Virtual Network Computer) /RDP (Remote Desktop Protocol), to any remote user with access to Internet and a web browser. Each item is explained as follow[...]

Vigor2120 Series User’s Guide 299 2. The following page will appear. Available settings are explained as follows: Item Description Enable Application Server Check the box to enable such profile. Application Name Type a name for such application. The length of the name is limited to 23 characters. Application There are three types offered for you [...]

Vigor2120 Series User’s Guide 300 4 4 . . 1 1 2 2 . . 3 3 U U s s e e r r A A c c c c o o u u n n t t With SSL VPN, Vigor2120 series let teleworkers ha ve convenient and simple rem ote access to central site VPN. The teleworkers do not need to install any VPN software manually. From regular web browser, you can establish VPN conn ection back to y[...]

Vigor2120 Series User’s Guide 301 Available settings are explained as follows: Item Description User account and Authentication Enable this account - Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 se[...]

Vigor2120 Series User’s Guide 302 Item Description  Must - Specify the IPSec policy to be definitely applied on the L2TP connection. Must - It allows the remote dial-in user to make an SSL VPN Tunnel connection through Internet, suitable for the application through network accessing (e.g., PPTP/L2TP/IPSec) If you check this box, the function o[...]

Vigor2120 Series User’s Guide 303 Item Description remote node. The only exception is Digital Signature (X.509) can be set when you select IPSec tunnel either with or without specify the IP address of the remote node. Pre-Shared Key - Check the box of Pre-Shared Key to invoke this function and type in the required characters (1-63) as the pre-sha[...]

Vigor2120 Series User’s Guide 304 4 4 . . 1 1 2 2 . . 4 4 O O n n l l i i n n e e U U s s e e r r S S t t a a t t u u s s If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into Draytek SSL VPN portal interface. Next, users can open SSL VPN>> Online Status to view log[...]

Vigor2120 Series User’s Guide 305 4 4 . . 1 1 3 3 U U S S B B A A p p p p l l i i c c a a t t i i o o n n USB storage disk connected on Vigor router can be regarded as a server or WAN interface. By way of Vigor router, clients on LAN can access, write and read data stored in USB storage disk with different applications. After setting the configur[...]

Vigor2120 Series User’s Guide 306 After finishing all the settings here, please click OK to save the configuration. 4 4 . . 1 1 3 3 . . 2 2 U U S S B B U U s s e e r r M M a a n n a a g g e e m m e e n n t t This page allows you to set profiles for FTP u sers. Any user who wants to access into the USB storage disk must type the same username a nd[...]

Vigor2120 Series User’s Guide 307 specified in this page to login into FTP server. Disable – Click this button to disable such profile. Username Type the username for FTP users for accessing into FTP server (USB storage disk). Be aware that users cannot access into USB storage disk in anonymity. Later, you can open FTP client software and type [...]

Vigor2120 Series User’s Guide 308 Before you click OK , you have to insert a USB storage disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. 4 4 . . 1 1 3 3 . . 3 3 F F i i l l e e E E x x p p l l o o r r e e r r File Explorer offers an easy way for users to view and manage the content of USB storage dis[...]

[...]

Vigor2120 Series User’s Guide 310 4 4 . . 1 1 3 3 . . 5 5 M M o o d d e e m m S S u u p p p p o o r r t t L L i i s s t t Such page provides the information about the brand nam e and model name of the USB modems which are supported by Vigor router.[...]

Vigor2120 Series User’s Guide 311 4 4 . . 1 1 4 4 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: System Status, TR-069, Administrator Password, User Password, Login Page Greeting, Configuration Backup, Syslog /Mail Alert, Time and Da[...]

Vigor2120 Series User’s Guide 312 Available settings are explained as follows: Item Description Model Name Display the model name of the router. Firmware Version Display the firmware version of the router. Build Date/Time Display the date and time of the current firmware build. LAN MAC Address - Display the MAC address of the LAN Interface. IP Ad[...]

Vigor2120 Series User’s Guide 313 4 4 . . 1 1 4 4 . . 2 2 T T R R - - 0 0 6 6 9 9 This device supports TR-069 standard. It is very convenient for an administrator to m anage a TR-069 device through an Auto Config uration Server, e.g., VigorACS. Available settings are explained as follows: Item Description ACS Server On Choose the interface for th[...]

Vigor2120 Series User’s Guide 314 to perform the test. Last Inform Response Time – Display the time that VigorACS server made a response while receiving Inform message from CPE last time. CPE Client Such information is useful for Auto Configuration Ser ver. Enable/Disable – Allow/Deny the CPE Client to connect with Auto Configuration Server. [...]

Vigor2120 Series User’s Guide 315 New Password Type in new password in this field. The length of the password is limited to 23 characters. Confirm Password Type in the new password again. When you click OK , the login window will appear. Please use the new password to access into the web user interface again. 4 4 . . 1 1 4 4 . . 4 4 U U s s e e r[...]

Vigor2120 Series User’s Guide 316 Below shows an example for accessing into User Operation with User Password. 1. Open System Maintenance>>User Password . 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK . 3. The following screen wi[...]

Vigor2120 Series User’s Guide 317 6. The main screen with User M ode will be shown as follows. Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Note : Setting in User Mode can be configured as same as in Admin Mode.[...]

Vigor2120 Series User’s Guide 318 4 4 . . 1 1 4 4 . . 5 5 L L o o g g i i n n P P a a g g e e G G r r e e e e t t i i n n g g When you want to access into the web user interface of Vigor router, the system will ask you to offer username and password first. At that moment, the background of the web page is blank and no heading will be displa yed o[...]

Vigor2120 Series User’s Guide 319 Below shows an example of login customiza tion with the information typed in L ogin Description and Bulletin.[...]

Vigor2120 Series User’s Guide 320 4 4 . . 1 1 4 4 . . 6 6 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u p p Such function can be used to apply the router settings configured by Vigor2110 to Vigor2120. B B a a c c k k u u p p t t h h e e C C o o n n f f i i g g u u r r a a t t i i o o n n Follow the steps below to backup [...]

Vigor2120 Series User’s Guide 321 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself. 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating exam ples. The Mac or Linux plat[...]

Vigor2120 Series User’s Guide 322 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click the Choose File button to choose the correct configuration file for uploadi ng to the router. 3. Click the R[...]

Vigor2120 Series User’s Guide 323 4 4 . . 1 1 4 4 . . 7 7 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. Available settings are explained as follows: Item Description SysLog Access Setup Enable - Check Enable to activate function of syslog. Syslog Save to – Check Syslog S[...]

Vigor2120 Series User’s Guide 324 Send a test e-mail - Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for verify the mail address is available or not. SMTP Server/SMTP Port - The IP address/Port number of the SMTP server. Mail To - Assign a mail addres[...]

Vigor2120 Series User’s Guide 325[...]

Vigor2120 Series User’s Guide 326 4 4 . . 1 1 4 4 . . 8 8 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Available settings are explained as follows: Item Description Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to us[...]

Vigor2120 Series User’s Guide 327 4 4 . . 1 1 4 4 . . 9 9 S S N N M M P P This page allows you to configure settings for SNMP and SNMPV3 services. The SNMPv3 is more secure than SNMP through the encryption method (support AES and DES) and authentication method (support MD 5 and S HA) for the management needs. Available settings are explained as f[...]

Vigor2120 Series User’s Guide 328 Notification Host IP (IPv6) Set the IPv6 address of the host that will receive the trap community. Trap Timeout The default setting is 10 seconds. Enable SNMPV3 Agent Check it to enable this function. USM User USM means user-based security mode. Type a username which will be used for authentication. The maximum l[...]

Vigor2120 Series User’s Guide 329 4 4 . . 1 1 4 4 . . 1 1 0 0 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the settings for access control, access list and port setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session. The management pages for IPv4 an[...]

Vigor2120 Series User’s Guide 330 Internet Access Control Allow management from the Internet - Enable the checkbox to allow system administrators to login from the Internet. There are several servers provided by the system to allow you managing the router from Internet. Check the box(es) to specify. Disable PING from the Internet - Check the chec[...]

Vigor2120 Series User’s Guide 331 F F o o r r I I P P v v 6 6 Available settings are explained as follows: Item Description Management Access Control Allow management from the Internet - Enable the checkbox to allow system administrators to login from the Internet. There are several servers provided by the system to allow you managing the router [...]

Vigor2120 Series User’s Guide 332 4 4 . . 1 1 4 4 . . 1 1 1 1 R R e e b b o o o o t t S S y y s s t t e e m m The Web user interface may be used to restart your router. Click Reboot System from System Maintenance to open the following page. Index (1-15) in Schedule Setup - You can type in four sets of time schedule for performing system reboot. A[...]

Vigor2120 Series User’s Guide 333 4 4 . . 1 1 4 4 . . 1 1 2 2 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that thi[...]

Vigor2120 Series User’s Guide 334 4 4 . . 1 1 4 4 . . 1 1 3 3 A A c c t t i i v v a a t t i i o o n n There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via System Maintenance>>Activation . After you have finished the setting profiles for WCF (refer to[...]

Vigor2120 Series User’s Guide 335 Below shows the successful activation of Web Content Filter:[...]

Vigor2120 Series User’s Guide 336 4 4 . . 1 1 5 5 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 4 4 . . 1 1 5 5 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r i i n n g g Click Diagnostics and c[...]

Vigor2120 Series User’s Guide 337 4 4 . . 1 1 5 5 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. And, Available settings are explained as follows: Item Description Refresh Click it to reload the page.[...]

Vigor2120 Series User’s Guide 338 4 4 . . 1 1 5 5 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content of the ARP (Address Resolution Protocol) cache held in the router. Th e table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Available [...]

Vigor2120 Series User’s Guide 339 4 4 . . 1 1 5 5 . . 5 5 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. And, Available settings are explaine[...]

Vigor2120 Series User’s Guide 340 Leased Time It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. 4 4 . . 1 1 5 5 . . 6 6 N N A A T T S S e e s s s s i i o o n n s s T T a a b b l l e e Click Diagnostics and click NAT Sessions Table to open the list page. [...]

Vigor2120 Series User’s Guide 341 4 4 . . 1 1 5 5 . . 7 7 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to open the web page. And, Available settings are explained as follows: Item Description IPV4 /IPV6 Choose the interface for such function. Ping to Use the drop down list to choose the destinatio[...]

Vigor2120 Series User’s Guide 342 4 4 . . 1 1 5 5 . . 8 8 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management. You have to enable IP bandw idth lim[...]

Vigor2120 Series User’s Guide 343 Refresh Click this link to refr esh this page manually. Index Display the number of the data flow. IP Address Display the IP address of the monitored device. TX rate (kbps) Display the transmission speed of the monitored device. RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display [...]

Vigor2120 Series User’s Guide 344 4 4 . . 1 1 5 5 . . 9 9 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to open the web page. Choose WAN1 Bandwidth, Backup WAN Bandwidth, Sessions, daily or weekly for viewing different traffic graph. Click Reset to zero the accumulated RX/TX (received and transmitted) d[...]

Vigor2120 Series User’s Guide 345 4 4 . . 1 1 5 5 . . 1 1 0 0 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run . The result of route trace will be shown on the scree[...]

Vigor2120 Series User’s Guide 346 Host/IP Address It indicates the IP address of the host. Trace Host/IP Address It indicates the IPv6 address of the host. Run Click this button to start route tracing work. Clear Click this link to remove the result on the window. 4 4 . . 1 1 5 5 . . 1 1 1 1 S S y y s s t t e e m m E E x x p p l l o o r r e e r r[...]

Vigor2120 Series User’s Guide 347 will be recorded by the system. Time Display the time of the event occurred. Message Display the information for each event. F F o o r r U U S S B B S S y y s s l l o o g g This page displays the syslog recorded on the USB storage disk. Available settings are explained as follows: Item Description Time Display th[...]

Vigor2120 Series User’s Guide 348 4 4 . . 1 1 5 5 . . 1 1 2 2 I I P P v v 6 6 T T S S P P C C S S t t a a t t u u s s IPv6 TSPC status web page could help you to diagnose the connection status of TSPC. If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Available settin[...]

Vigor2120 Series User’s Guide 349 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the we b configuration. Please follow sections below to check your basic installation status stage by stage.  Ch[...]

Vigor2120 Series User’s Guide 350 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong network[...]

Vigor2120 Series User’s Guide 351 4. Select Internet Protocol Version 4 (TCP/IP) and then click Properties . 5. Select Obtain an IP address automatically and Obtain DNS server address automatically . Finally, click OK . F F o o r r M M a a c c O O S S 1. Double click on the current used Mac OS on the desktop. 2. Open the Application folder and ge[...]

Vigor2120 Series User’s Guide 352[...]

Vigor2120 Series User’s Guide 353 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most import[...]

Vigor2120 Series User’s Guide 354 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t If WAN connection cannot be up, check if the LEDs (according to the LED explanations listed on section 1.2) are correct or not. If the LEDs are off, please:  Chang[...]

Vigor2120 Series User’s Guide 355 If the USB LED does not light on, please remove a nd reinsert the modem again. If it still fails, restart Vigor2120. U U S S B B L L E E D D l l i i g g h h t t s s o o n n b b u u t t t t h h e e n n e e t t w w o o r r k k c c o o n n n n e e c c t t i i o o n n d d o o e e s s n n o o t t w w o o r r k k Check[...]

Vigor2120 Series User’s Guide 356 Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click Reboot Now . After few seconds, the router will return all the settings to the factory settings. H H a a r r d d w w a a r r e e R R e e s s e e t t While the r[...]

Vigor2120 Series User’s Guide 357 5 5 . . 7 7 C C o o n n t t a a c c t t i i n n g g D D r r a a y y T T e e k k If the router still cannot work correctly after trying many efforts, please feel free to send e-mail to support@DrayTek.com.[...]

Vigor2120 Series User’s Guide 358 This page is left blank.[...]

Vigor2120 Series User’s Guide 359 T T e e l l n n e e t t C C o o m m m m a a n n d d R R e e f f e e r r e e n n c c e e A A c c c c e e s s s s i i n n g g T T e e l l n n e e t t o o f f V V i i g g o o r r 2 2 1 1 2 2 0 0 This chapter also gives you a general description for accessing telnet and describes the firmware versions for the rout er[...]

Vigor2120 Series User’s Guide 360 For users using previous Windows system (e.g., 200 0/XP), simply click Start >> Run and type Telnet 192.168.1.1 in the Open box as below. Next, t ype admin/admin for Account/Password. And, type ? to get a list of valid/common commands T T e e l l n n e e t t C C o o m m m m a a n n d d : : b b p p a a This [...]

Vigor2120 Series User’s Guide 361 -l <List> List all settings configured. E E x x a a m m p p l l e e > bpa 1 -a 1 -n testUser -p testPassword -s 4 > bpa -l -------index: 1 active------ UserName[1]: testUser PassWord[1]: testPassword ServerIP[1]:4 -------index: 2 inactive------ UserName[2]: PassWord[2]: ServerIP[2]:0 > T T e e l l [...]

Vigor2120 Series User’s Guide 362 IM, P2P, Protocol and MISC, AP_IDX It means to specify the index of the APP Enforcement profile. - v It means to view the configuration (IM/P2P/Protocol/MISC) of the profile. -e It means to enable blocking for a specific application. -d It means to disable blocking for a specific application. -a It means to set t[...]

Vigor2120 Series User’s Guide 363 . T T e e l l n n e e t t C C o o m m m m a a n n d d : : c c s s m m a a p p p p e e c c o o n n f f i i g g It is used to show configuration of specified APP Enforcement profile. csm appe config -v INDEX [-i|-p|-t|-m] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n P P a a r r a a m m e e t [...]

Vigor2120 Series User’s Guide 364 It is used to configure settings for URL control filter profile. csm ucf show csm ucf cache csm ucf setdefault csm ucf msg MSG csm ucf obj INDEX [-n PROFILE_NAME | -l [P|B|A|N] | uac | wf ] csm ucf obj INDEX -n PROFILE_NAME csm ucf obj INDEX -p VALUE csm ucf obj INDEX -l P|B|A|N csm ucf obj INDEX uac csm ucf obj [...]

Vigor2120 Series User’s Guide 365 E E x x a a m m p p l l e e > csm ucf obj 1 -n game -l B Profile Index: 1 Profile Name:[game] Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[pass] [ ]Prevent web access from IP address. No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Nam[...]

Vigor2120 Series User’s Guide 366 ex -g Set the keyword group. KEY_WORD_Group_Inde x Specify the index number of the group profile. E E x x a a m m p p l l e e > csm ucf obj 1 uac -i E Profile Index: 1 Profile Name:[game] Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[pass] [v]Prevent web access from IP addre[...]

Vigor2120 Series User’s Guide 367 T T e e l l n n e e t t C C o o m m m m a a n n d d : : c c s s m m u u c c f f o o b b j j I I N N D D E E X X w w f f It means to configure the settings regarding to Web Feature (wf). csm ucf obj INDEX wf -v csm ucf obj INDEX wf -e csm ucf obj INDEX wf -d csm ucf obj INDEX wf -a P|B csm ucf obj INDEX wf -s WEB_[...]

Vigor2120 Series User’s Guide 368 No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- [ ]Enable Restrict Web Feature Action:[pass] File Extension Object Index : [0] Profile Name : [] [V] Cookie [ ] Proxy [ ] Upload T T e e l l n n e e t t C C o o m m m m a a n [...]

Vigor2120 Series User’s Guide 369 profile, from 1 to 8. - v It means to view the web content filter profile. -a Set the action of web content filter profile, P or B. B: Block. The web access meets the web feature will be blocked. P: Pass. The web access meets the web feature will be passed. -n It means to set the profile name. PROFILE_NAME It mea[...]

Vigor2120 Series User’s Guide 370 Dining,Shopping, Translators, General, Cults,Greetig cards, Image Sharing, Network Errors, Parked Domains, Private IP Addresses) E E x x a a m m p p l l e e > csm wcf obj 1 -n test_wcf Profile Index: 1 Profile Name:[test_wcf] []White/Black list Action:[block] No Obj NO. Object Name --- -------- ---------------[...]

Vigor2120 Series User’s Guide 371 be sent to Syslog. A: All. Records for the packets passing through or blocked by DNS filter will be sent to Syslog. N: None. No record will be sent to Syslog. service WCF_PROFILE WCF_PROFILE: Specify a WCF profile as the base of DNS filtering. Type a number to indicate the index number of WCF profile (1 is first [...]

Vigor2120 Series User’s Guide 372 ddns time <update in minutes> Valid: 1 ~ 1440 %Now: 1440 > ddns time 1000 ddns time <update in minutes> Valid: 1 ~ 1440 %Now: 1000 T T e e l l n n e e t t C C o o m m m m a a n n d d : : d d o o s s This command allows users to configur e the settings for DoS defense system. dos [-V | D | A] dos [-[...]

Vigor2120 Series User’s Guide 373 T T e e l l n n e e t t C C o o m m m m a a n n d d : : e e x x i i t t Type this command will leave telnet window. T T e e l l n n e e t t C C o o m m m m a a n n d d : : I I n n t t e e r r n n e e t t This command allows you to configure detailed settings for WAN connection. internet -W n -M n [-<command>[...]

Vigor2120 Series User’s Guide 374 -s <server ip> It means to set PPTP/L2TP server IP. -V It means to view Internet Access profile. E E x x a a m m p p l l e e >internet -M 1 -S tcom -u username -p password -a 0 -t -1 -i 0.0.0.0 WAN1 Internet Mode set to PPPoE/PPPoA WAN1 ISP Name set to tcom WAN1 Username set to username WAN1 Password set[...]

Vigor2120 Series User’s Guide 375 Parameter Description ? Display an IP address which a llows users set as the public subnet IP address. public subnet IP address Specify an IP address. The system will set the one that you specified as the public subnet IP address. E E x x a a m m p p l l e e > ip pubaddr ? % ip addr <public subnet IP addres[...]

Vigor2120 Series User’s Guide 376 IP It means the auxiliary WAN IP address. Join to NAT Pool 0 (disable) or 1 (enable). index Type the index number of the table displayed on your screen. E E x x a a m m p p l l e e > ip aux add 192.168.1.65 1 % 192.168.1.65 has added in index 2. > ip aux ?%% ip aux add [IP] [Join to NAT Pool] %% ip aux remo[...]

Vigor2120 Series User’s Guide 377 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p n n m m a a s s k k This command allows users to set/add a specified netmask for your router. ip nmask [IP netmask] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description IP netmask It means the netmask of LAN IP. E[...]

Vigor2120 Series User’s Guide 378 E E x x a a m m p p l l e e > ip arp accept status Accept illegal source mac arp: disable Accept illegal dest mac arp: disable Accept VRRP mac into arp table: disable > ip arp status [ARP Table] Index IP Address MAC Address Netbios Name 1 192.168.1.113 00-05-5D-E4-D8-EE A1000 351 T T e e l l n n e e t t C C[...]

Vigor2120 Series User’s Guide 379 >ip dhcpc status I/F#3 DHCP Client Status: DHCP Server IP : 172.16.3.7 WAN Ipm : 172.16.3.40 WAN Netmask : 255.255.255.0 WAN Gateway : 172.16.3.1 Primary DNS : 168.95.192.1 Secondary DNS : 0.0.0.0 Leased Time : 259200 Leased Time T1 : 129600 Leased Time T2 : 226800 Leased Elapsed : 259194 Leased Elapsed T1 : 1[...]

Vigor2120 Series User’s Guide 380 E E x x a a m m p p l l e e >ip tracert 22.128.2.62 WAN1 Traceroute to 22.128.2.62, 30 hops max 1 172.16.3.7 10ms 2 172.16.1.2 10ms 3 Request Time out. 4 168.95.90.66 50ms 5 211.22.38.134 50ms 6 220.128.2.62 50ms Trace complete T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p t t e e l l n n e e[...]

Vigor2120 Series User’s Guide 381 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p w w a a n n r r i i p p This command allows users to set the RIP (routing information protocol) of WAN IP. ip wanrip [ifn o] -e [0 /1] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description ifno It means the connect[...]

Vigor2120 Series User’s Guide 382 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p r r o o u u t t e e This command allows users to set static route. ip route add [dst] [netmask][gateway][ifno][rtype] ip route del [dst] [netmask] [rtype] ip route status ip route cnc ip route default [wan1/wan2/off/? ] ip route clean [1/0] S S y y n[...]

Vigor2120 Series User’s Guide 383 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p i i g g m m p p _ _ p p r r o o x x y y This command allows users to en able/disable igmp proxy server. ip igmp_proxy set ip igmp_proxy reset ip igmp_proxy wan ip igmp_proxy t_home[on/off/show/help] ip igmp_proxy query ip igmp_proxy ppp [0/1 ] ip igm[...]

Vigor2120 Series User’s Guide 384 ip igmp_snoop disable ip igmp_snoop status ip igmp_snoop table ip igmp_snoop txquery ip igmp_snoop mode ip igmp_snoop chkleave ip igmp_snoop separate ip igmp_snoop portchk S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description enable It means to enable igmp snoop function disabl[...]

Vigor2120 Series User’s Guide 385 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p w w a a n n a a d d d d r r This command is used to configure WAN IP address. ip wanaddr [IP address] ]<IP netmask] [gateway ip] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description IP address Type the IP addre[...]

Vigor2120 Series User’s Guide 386 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p d d m m z z s s w w i i t t c c h h This command allows users to set DMZ mode. ip dmzswitch off ip dmzswitch private ip dmzswitch trueip ( 請問這邊所說的 trueip 跟下方所說的 active_trueip 的差異是 ??) ip dmzswitch active_trueip S S y[...]

Vigor2120 Series User’s Guide 387 status It means to display the current settings. show It means to display all session limit settings in the IP range. timer [num] It means to set when the IP session block works. The unit is second. [block/unblock][IP] It means to block/unblock the specified IP address. Block: The IP cannot access Internet throug[...]

Vigor2120 Series User’s Guide 388 range is from 0 – 65535 Kpbs. status It means to display the current settings. show It means to display all the bandwidth limits settings within the IP range. add It means to add the bandwidth within the IP range. del It means to delete the bandwidth within the IP range. IP1-IP2 It means the range of IP address[...]

Vigor2120 Series User’s Guide 389 show It means to display the IP address and MAC address of the pair of binded one. add It means to add one ip bindmac. del It means to delete one ip bindmac. IP It means to type the IP addr ess for binding with specified MAC address. MAC It means to type the MAC address for binding with the IP address specified. [...]

Vigor2120 Series User’s Guide 390 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p m m a a x x n n a a t t u u s s e e r r This command is used to set the maximum number of NAT users. ip maxnatuser user no S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description User no A number specified here means[...]

Vigor2120 Series User’s Guide 391 % Idx ReplyOnlySameSubnet IP Address % 1 Yes 172.16.2.10 % 2 Yes 172.16.3.10 % 3 Yes 172.16.4.10 -n<domain name> It means to specify a domain name to be accessed. -p<profile name> It means to set name of the LAN DNS profile. -r It means to clear specified domain name profile and the address mapping se[...]

Vigor2120 Series User’s Guide 392 -d It means to delete an ipv6 address. -a It means to show current address(es) status. -u It means to show only unicast addresses. prefix It means to type the prefix number of IPv6 address. prefix-length It means to type a fixed value as the length of the prefix. LAN|WAN1|WAN2|iface# It means to specify LAN or WA[...]

Vigor2120 Series User’s Guide 393 -B It means to ask BCMCS name. -r It means to ask refresh time. Parameter 1: the parameter related to the request will be displayed. 0: the parameter related to the request will not be displayed. E E x x a a m m p p l l e e > ip6 dhcp req_opt WAN2 -S 1 > ip6 dhcp req_opt WAN2 -r 1 > ip6 dhcp req_opt WAN2[...]

Vigor2120 Series User’s Guide 394 DHCPv6 client enabled request IA_NA whose IAID equals to 2008 > system reboot T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p 6 6 d d h h c c p p s s e e r r v v e e r r This command allows you to configure DHCPv6 server. ip6 dhcp server [-<command> <parameter>| ... ] S S y y n n t [...]

Vigor2120 Series User’s Guide 395 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p 6 6 i i n n t t e e r r n n e e t t This command allows you to configure settings for accessing Internet. ip6 internet -W n -M n [-<command> <parameter> | ... ] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter[...]

Vigor2120 Series User’s Guide 396 RADVD. <dhcp/ra/none>= type IPv6 address. -V It means to view IPv6 Internet Access Profile. -o It means to set AICCU always on. 1=On, 0=Off E E x x a a m m p p l l e e > ip6 internet -W 2 -M 2 -u 88886666 -p draytek123456 –s amsterdam.freenet6.net This setting will take effect after rebooting. Please u[...]

Vigor2120 Series User’s Guide 397 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p 6 6 p p n n e e i i g g h h This command allows you to add a proxy neighbour. ip6 pneigh -s inet6_addr [LAN|WAN1|WAN2 ] ip6 pneigh -d inet6_addr [LAN|WAN1|WAN2 ] ip6 pneigh -a [inet6_addr ] [-N LAN|WAN1|WAN2] S S y y n n t t a a x x D D e e s s c c r[...]

Vigor2120 Series User’s Guide 398 PREFIX/PREFIX-LEN _EXPIRES_ _NEXT-HOP_ I/F METRIC STATE FLAGS ------------------------------------------------------------------------ FE80::/128 LAN 0 UNICAST U 0 : : FE80::250:7FFF:FE00:0/128 LAN 0 UNICAST U 0 : : FE80::/64 LAN 256 UNICAST U 0 FE80::/16 LAN 1024 UNICAST UGA 0 FE80::250:7FFF:FE12:100 FF02::1/128[...]

Vigor2120 Series User’s Guide 399 T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p 6 6 t t s s p p c c This command allows you to display TSPC status. ip6 tspc [ifno] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description ifno It means the connection interface. Ifno=1 (means WAN1) Info=2 (means WA[...]

Vigor2120 Series User’s Guide 400 -r [num ] It means RA test for item [num]. E E x x a a m m p p l l e e > ip6 radvd -s 1 1800 > ip6 radvd -V % IPv6 Radvd Config: Radvd : Enable, Default Lifetime : 1800 seconds T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p 6 6 m m n n g g t t This command allows you to manage the settings [...]

Vigor2120 Series User’s Guide 401 3 FE80::250:7FFF:FE12:2080 12 8 > ip6 mngt status % IPv6 Remote Management : telnet : off, http : off, ping : off T T e e l l n n e e t t C C o o m m m m a a n n d d : : i i p p 6 6 o o n n l l i i n n e e This command allows you to check the online status of IPv6 LAN /WAN. ip6 online [ifno ] S S y y n n t t a[...]

Vigor2120 Series User’s Guide 402 ifno It means the connection interface. 1=WAN1 2=WAN2 add It means to add an IPv6 address which can be used to execute management through Internet. prefix It means to type the IPv6 address which will be used for accessing Internet. prefix-length It means to type a fixed value as the length of the prefix. remove I[...]

Vigor2120 Series User’s Guide 403 ipf view [-VcdhrtzZ] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description -V It means to show the version of this IP filter. -c It means to show the running call filter rules. -d It means to show the running data filter rules. -h It means to show the hit-number of the filter r[...]

Vigor2120 Series User’s Guide 404 Type “2” to display the log of blocked packet. Type “3” to display the log of non-matching packet. - p [VALUE] It means to setup actions for packet not matching any rule, e.g., -p 1 Type “0” to let all the packets pass; Type “1” to block all the packets. -M [P2P_NO] It means to configure IM/P2P fo[...]

Vigor2120 Series User’s Guide 405 Session timeout : 1440 DrayTek Banner : E nable --------------------------------------------------------------- Apply IP filter to VPN incoming packets : Enable Accept large incoming fragmented UDP or ICMP packets: Enable ---------------------------------------------------------------- Strict Security Checking [ [...]

Vigor2120 Series User’s Guide 406 –d u <Address Type> <Start IP Address> <End IP Address> | <Address Mask> It means to configure destination IP address including address type, start IP address, end IP address and address mask. u – It means “user defined”. Address Type - Type the number (representing different addre[...]

Vigor2120 Series User’s Guide 407 1 – Block Immediately, 2 – Pass if no further match, 3 – Block if no further match. -q It means the classification for QoS. 1– Class 1, 2 – Class 2, 3 – Class 3, 4 – Other -l It means load balance policy. Such function is used for “debug” only. -E It means to enable APP Enforcement. -a<index&[...]

Vigor2120 Series User’s Guide 408 <Session_Timeout> <Windows Size> - Available settings range from 1 ~ 65535. <Session_Timeout> - Make the best utilization of network resources. -v It is used to show current filter/rule settings. E E x x a a m m p p l l e e > ipf rule 2 1 -e 1 -s "o 1" -d "o 2" -S "o [...]

Vigor2120 Series User’s Guide 409 ipf flowtrack [-i] [- p][- t] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description -r It means to refresh the flowtrack. -e It means to enable or disable the flowtrack. 0: Disable 1: Enable -f It means to show the sessions state of flowtrack. If you do not specify any IP addre[...]

Vigor2120 Series User’s Guide 410 Parameter Description -c It means to show the latest call log. -f It means to show the IP filter log. -F It means to show the flush log buffer. a: flush all logs c: flush the call log f: flush the IP filter log w: flush the WAN log -h It means to show this usage help. -p It means to show PPP/MP log. -t It means t[...]

Vigor2120 Series User’s Guide 411 T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m n n g g t t f f t t p p p p o o r r t t This command allows users to set FTP port for management. mngt ftpport [FTP port] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description FTP port It means to type the number for F[...]

Vigor2120 Series User’s Guide 412 T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m n n g g t t t t e e l l n n e e t t p p o o r r t t This command allows users to set telnet port for management. mngt telnetport [Telnet port] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description Telnet port It means [...]

Vigor2120 Series User’s Guide 413 T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m n n g g t t n n o o p p i i n n g g This command is used to pass or bloc k Ping from LAN PC to the internet. mngt noping [on] mngt noping [off] mngt noping [viewlog] mngt noping [clearlog] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n[...]

Vigor2120 Series User’s Guide 414 T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m n n g g t t d d e e f f e e n n s s e e w w o o r r m m This command can block specified port for passing through the router. mngt defenseworm [on] mngt defenseworm [of f] mngt defenseworm [add port ] mngt defenseworm [del port] mngt defenseworm [vie wl [...]

Vigor2120 Series User’s Guide 415 disable It means to deny the system administrators to login from the Internet. http/https/ftp/telnet/ssh/tr0 69 It means to specify one of th e servers/protocols for enabling or disabling. on/off on – enable the function. off – disable the function. E E x x a a m m p p l l e e > mngt rmtcfg ftp on Enable s[...]

Vigor2120 Series User’s Guide 416 list It can display current setting for your reference. add It means adding a new entry. index It means to specify the number of the entry. ip addr It means to specify an IP address. mask It means to specify the subn et mask for the IP address. remove It means to delete the selected item. flush It means to remove[...]

Vigor2120 Series User’s Guide 417 > mngt snmp -e 1 -g draytek -s DK -m 192.168.1.1 -t trapcom -n 10.20.3.40 -T 88 SNMP Agent Turn on!!! Get Community set to draytek Set Community set to DK Manager Host IP set to 192.168.1.1 Trap Community set to trapcom Notification Host IP set to 10.20.3.40 Trap Timeout set to 88 seconds T T e e l l n n e e t[...]

Vigor2120 Series User’s Guide 418 Please use "sys reboot" command to reboot the router. T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m s s u u b b n n e e t t n n m m a a s s k k This command is used to configure net m ask address for the specified LAN interface. msubnet nmask [2][IP address] S S y y n n t t a a x x D D e e[...]

Vigor2120 Series User’s Guide 419 Off means disabling the DHCP server. E E x x a a m m p p l l e e > msubnet dhcps 2 off % LAN2 Subnet DHCP Server disabled! This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m s s u u b b n n e[...]

Vigor2120 Series User’s Guide 420 This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m s s u u b b n n e e t t i i p p c c n n t t This command is used to defined the to tal number allowed for each LAN interface. msubnet ipcnt [2][...]

Vigor2120 Series User’s Guide 421 % LAN2 V V > T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m s s u u b b n n e e t t s s t t a a r r t t i i p p This command is used to configure a starting IP address for DCHP. msubnet startip [2] [Gat ewa y IP] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Descrip[...]

Vigor2120 Series User’s Guide 422 T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m s s u u b b n n e e t t n n o o d d e e t t y y p p e e This command is used to specify the type for node which is required by DHCP option. msubnet nodetype [2][count] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Descript[...]

Vigor2120 Series User’s Guide 423 T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m s s u u b b n n e e t t s s e e c c W W I I N N S S This command is used to configure secondary WINS server. msubnet secWINS [2] [WIN S IP] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description 2 It means LAN interface[...]

Vigor2120 Series User’s Guide 424 T T e e l l n n e e t t C C o o m m m m a a n n d d : : m m s s u u b b n n e e t t t t f f t t p p This command is used to set TFTP server for multi-subnet. msubnet tftp [2 [TFTP server name] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description 2 It means LAN interface. 2=LAN[...]

Vigor2120 Series User’s Guide 425 LAN1 MTU: 1492 (Bytes) LAN2 MTU: 1500 (Bytes) IP Routed Subnet MTU: 1500 (Bytes) > T T e e l l n n e e t t C C o o m m m m a a n n d d : : o o b b j j e e c c t t i i p p o o b b j j This command is used to create an IP object profile. object ip obj setdefault object ip obj INDEX -v object ip obj INDEX -n NAME[...]

Vigor2120 Series User’s Guide 426 [START_IP] When the TYPE is set with 2, you have to type an IP address as a starting point and anot her IP address as end point. Type an IP address. [END /MA SK_ IP] Type an IP address (different with START_IP) as the end IP address. E E x x a a m m p p l l e e > object ip obj 1 -n marketing > object ip obj[...]

Vigor2120 Series User’s Guide 427 The IP object profiles with index number 1,2,3,4 and 5 will be group under such profile. E E x x a a m m p p l l e e > object ip grp 2 -n First IP Group Profile 2 Name :[First] Interface:[Any] Included ip object index: [0:][0] [1:][0] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] > object ip grp 2 -i 1 &g[...]

Vigor2120 Series User’s Guide 428 T T e e l l n n e e t t C C o o m m m m a a n n d d : : o o b b j j e e c c t t i i p p v v 6 6 o o b b j j This comman is used to create an IP object profile. object ip obj setdefault object ip obj INDEX -v object ip obj INDEX -n NAME object ip obj INDEX -i INTERFACE object ip obj INDEX -s INVERT object ip obj I[...]

Vigor2120 Series User’s Guide 429 E E x x a a m m p p l l e e > object ip obj 1 -n marketing > object ip obj 1 -a 1 192.168.1.45 > object ip obj 1 -v IP Object Profile 1 Name :[marketing] Interface:[Any] Address type:[single] Start ip address:[192.168.1.45] End/Mask ip address:[0.0.0.0] Invert Selection:[0] T T e e l l n n e e t t C C o [...]

Vigor2120 Series User’s Guide 430 Name :[First] Interface:[Any] Included ip object index: [0:][0] [1:][0] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] [8:][0] [9:][0] [10:][0] [11:][0] > object ip grp 2 -i 1 > object ip grp 2 -a 1 2 IP Group Profile 2 Name :[First] Interface:[Lan] Included ip object index: [0:][1] [1:][2] [2:][0] [3:][0][...]

Vigor2120 Series User’s Guide 431 INDEX It means the index number of the specified service object profile. -v It means to view the information of the specified service object profile. Example: object service obj 1 -v -n NAME It means to define a name for the IP object. NAME: Type a name with less than 15 characters. Example: object service obj 9 [...]

Vigor2120 Series User’s Guide 432 T T e e l l n n e e t t C C o o m m m m a a n n d d : : o o b b j j e e c c t t s s e e r r v v i i c c e e g g r r p p This command is used to integrate sever al service objects under a service group profile. object service grp setdefault object service grp INDEX -v object service grp INDEX -n NAME object servic[...]

Vigor2120 Series User’s Guide 433 [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] T T e e l l n n e e t t C C o o m m m m a a n n d d : : o o b b j j e e c c t t k k w w This command is used to create keyword profile. object kw obj setdefault object kw obj show PAGE object kw obj INDEX -v object kw obj INDEX -n NAME object kw obj INDEX -a CONTENTS S S y [...]

Vigor2120 Series User’s Guide 434 T T e e l l n n e e t t C C o o m m m m a a n n d d : : o o b b j j e e c c t t f f e e This command is used to create File Extension Object profile. object fe show object fe setdefault object fe obj INDEX -v object fe obj INDEX -n NAME object fe obj INDEX -e CATEGORY|FILE_EXTENSION object fe obj INDEX -d CATEGOR[...]

Vigor2120 Series User’s Guide 435 E E x x a a m m p p l l e e > object fe obj 1 -n music > object fe obj 1 -e Audio > object fe obj 1 -v Profile Index: 1 Profile Name:[music] ------------------------------------------------------------------------- ------ Image category: [ ].bmp [ ].dib [ ].gif [ ].jpeg [ ].jpg [ ].jpg2 [ ].jp2 [ ].p ct [...]

Vigor2120 Series User’s Guide 436 T T e e l l n n e e t t C C o o m m m m a a n n d d : : p p o o r r t t This command allows users to check th e connection speed used by each port. port status S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description status It means to view the Ethernet port status. E E x x a a m [...]

Vigor2120 Series User’s Guide 437 E E x x a a m m p p l l e e > portmaptime -t 86400 -u 300 -i 10 > portmaptime -l ------ Current setting ------ TCP Timeout : 86400 sec. UDP Timeout : 300 sec. IGMP Timeout : 10 sec. TCP WWW Timeout: 60 sec. TCP SYN Timeout: 60 sec. T T e e l l n n e e t t C C o o m m m m a a n n d d : : p p r r n n This com[...]

Vigor2120 Series User’s Guide 438 0: disable 1: enable Default is disable. -p <ratio> It means to enable bandwidth limit ratio for UDP. -t <mode> It means to enable/disable Outbound TCP ACK Prioritize. 0: disable 1: enable -V Show all the settings. -D Set all to factory default (for all WANs). […] It means that you can type in sever[...]

Vigor2120 Series User’s Guide 439 T T e e l l n n e e t t C C o o m m m m a a n n d d : : q q o o s s c c l l a a s s s s This command allows user to set QoS class. qos class -c [no] –[a|e|d] [no] [-<command> <parameter> | ... ] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description [<command>[...]

Vigor2120 Series User’s Guide 440 -s <Service type> Specify the service type by ty ping the number. The available types are listed as below: 1:ANY 2:DNS 3:FTP 4:GRE 5:H.323 6:HTTP 7:HTTPS 8:IKE 9:IPSEC-AH 10:IPSEC-ESP 11:IRC 12:L2TP 13:NEWS 14:NFS 15:NNTP 16:PING 17:POP3 18:PPTP 19:REAL-AUDIO 20:RTSP 21:SFTP 22:SIP 23:SMTP 24:SNMP 25:SNMP-T[...]

Vigor2120 Series User’s Guide 441 E E x x a a m m p p l l e e > qos type -a draytek -t 6 -p 510:1330 service name set to draytek service type set to 6:TCP Port type set to Range Service Port set to 510 ~ 1330 > T T e e l l n n e e t t C C o o m m m m a a n n d d : : q q u u i i t t This command can exit th e telnet command screen. T T e e l[...]

Vigor2120 Series User’s Guide 442 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s h h o o w w d d m m z z This command displays current status of DMZ host. E E x x a a m m p p l l e e > show dmz % WAN1 DMZ mapping status: Index Status WAN1 aux IP Private IP ---------------------------------------------------- 1 Disable 172.16.3.221[...]

Vigor2120 Series User’s Guide 443 16 0 0 0.0 .0.0 0 17 0 0 0.0 .0.0 0 18 0 0 0.0 .0.0 0 19 0 0 0.0 .0.0 0 20 0 0 0.0 .0.0 0 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s h h o o w w p p o o r r t t m m a a p p This command displays the[...]

Vigor2120 Series User’s Guide 444 IP:172.16.3.2 TX Packets:0 TX Rate:0 RX Packets:0 RX Rate:0 ADSL Information: ADSL Fi rmware Version:05-04-04-04-00-01 Mode: State:TRAINING TX Block:0 RX Block:0 Corrected Blocks:0 Uncorrected Blocks:0 UP Speed:0 D own Speed:0 SNR Margin:0 Loop Att.:0 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s h [...]

Vigor2120 Series User’s Guide 445 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v d d h h c c p p d d h h c c p p 2 2 This command is used to enable DCHP2 server. srv dhcp dhcp2 [-<command> <parameter> | ... ] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description [<command>[...]

Vigor2120 Series User’s Guide 446 IP address It means to specify an IP address as the starting point in the IP address pool. cnt It means the IP count number. IP counts It means to specify the number of IP addresse s in the pool. The maximum is 10. status It means the execution result of this command. add It means creating a list of hosts to be a[...]

Vigor2120 Series User’s Guide 447 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v d d h h c c p p d d n n s s 2 2 This command allows users to set Seconda ry IP Address for DNS Server in LAN. srv dhcp dns2 [lan1/lan2/lan3/lan4] [DNS IP address] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Descr[...]

Vigor2120 Series User’s Guide 448 E E x x a a m m p p l l e e > srv dhcp gateway 192.168.2.1 This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v d d h h c c p p i i p p c c n n t t This command allows users to sp ecify[...]

Vigor2120 Series User’s Guide 449 > srv dhcp relay servip ? % srv dhcp relay servip <server ip> % Now: 192.168.1.46 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v d d h h c c p p s s t t a a r r t t i i p p srv dhcp startip [?] srv dhcp startip [IP address] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i [...]

Vigor2120 Series User’s Guide 450 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v d d h h c c p p l l e e a a s s e e t t i i m m e e This command can set the lease time for the DHCP ser ver. srv dhcp leasetime [?] srv dhcp leasetime [Lease Time (sec)] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Paramet[...]

Vigor2120 Series User’s Guide 451 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v d d h h c c p p p p r r i i m m W W I I N N S S This command can set the primary IP address for the DHCP server . srv dhcp primWINS [WINS IP address] srv dhcp primWINS clear S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Para[...]

Vigor2120 Series User’s Guide 452 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v d d h h c c p p e e x x p p R R e e c c y y c c l l e e I I P P This command can set the time to check if the IP address can be assigned again by DHCP server or not. srv dhcp expRecycleIP <sec time> S S y y n n t t a a x x D D e e s s c c r[...]

Vigor2120 Series User’s Guide 453 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v d d h h c c p p o o p p t t i i o o n n This command can set the custom option for the DHCP server. srv dhcp option -h srv dhcp option -l srv dhcp option -d [idx ] srv dhcp option -e [1 or 0] -i [lan num ber] -c [option number] -v [option value] [...]

Vigor2120 Series User’s Guide 454 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v n n a a t t a a d d d d r r m m a a p p p p i i n n g g This command allows users to map specific private IP to specific WAN IP alias. srv nat addrmapping n [-<command> <parameter> | ... ] S S y y n n t t a a x x D D e e s s c c r r i[...]

Vigor2120 Series User’s Guide 455 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v n n a a t t d d m m z z This command allows users to set DMZ host. Before using this command, please set WAN IP Alias first. Srv nat dmz n m [-<command> <parameter> | … ] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o[...]

Vigor2120 Series User’s Guide 456 source port (500) preservation. status It means to display current status for checking. E E x x a a m m p p l l e e > srv nat ipsecpass status %% Status: IPsec ESP pass- t hru and IKE src_port:500 preservation is OFF. T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s r r v v n n a a t t o o p p e e n[...]

Vigor2120 Series User’s Guide 457 profiles. E E x x a a m m p p l l e e > srv nat openport 1 1 -a 1 -c games -i 192.168.1.100 -w 1 -p TCP - s 23 -e 83 > srv nat openport -v %% Status: Enable %% Comment: games %% Private IP address: 192.168.1.100 Index Protocal Start Port End Port *************************************************************[...]

Vigor2120 Series User’s Guide 458 del [idx] It means to remove the selected port redirection setting. disable [idx] It means to inactivate the selected port redirection setting. enable [idx] It means to activate the selected port redirection setting. flush It means to clear all the port mapping settings. table It means to display Port Redirection[...]

Vigor2120 Series User’s Guide 459 line. -c It means to type a brief description for the setting profile. -e It means to enable/disable the specified profile. 1: Enable 0: Disable -p It means to set the the protocol for the profile. 1: TCP 2: UDP 3: All -t It means to set triggering port. -P It means to set the protoc ol for incomming packets. 1:T[...]

Vigor2120 Series User’s Guide 460 Telnet Command: srv nat status This command allows users to view NAT Port Redirection Running Table. E E x x a a m m p p l l e e > srv nat status NAT Port Redirection Running Table: Index Protocol Public Port Private IP Pr ivate Port 1 6 80 192.168.1.11 100 2 0 0 0.0.0.0 0 3 0 0 0.0.0.0 0 4 0 0 0.0.0.0 0 5 0 0[...]

Vigor2120 Series User’s Guide 461 switch not_respond 1 S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description switch idx_no It means the index number of the switch profile. option The available commands with parameters are listed below. cmd acc traffic [on/off/status/tx/rx] cmd It means to send command to the cl[...]

Vigor2120 Series User’s Guide 462 -t <enable> It is used to disable/enable telnet service (0: disable, 1: enable). -f <enable> It is used to disable/enable FTP service (0: disable, 1: enable). -s <enable> It is used to disable/enable SSH service (0: disable, 1: enable). -p <enable> It is used to disable/enable printer serv[...]

Vigor2120 Series User’s Guide 463 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s y y s s f f t t p p d d This command displays current status of FTP server. sys ftpd on sys ftpd off S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description on It means to turn on the FTP server of the system. off It mea[...]

Vigor2120 Series User’s Guide 464 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s y y s s i i f f a a c c e e This command displays the current interface conn ection status (UP or Down) with IP address, MAC address and Netmask for the router. E E x x a a m m p p l l e e > sys iface Interface 0 Ethernet: Status: UP IP Address: 192.1[...]

Vigor2120 Series User’s Guide 465 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s y y s s n n a a m m e e This command can set and remove the name fo r the router when DHCP mode is selected for WAN. sys name [wan1] [ASCII string] sys name [wan1] clea r S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Descr[...]

Vigor2120 Series User’s Guide 466 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s y y s s a a u u t t o o r r e e b b o o o o t t This command allows users to restart the r outer automatically within a certain time. sys autoreboot [on/off/hour(s)] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Descriptio[...]

Vigor2120 Series User’s Guide 467 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s y y s s v v e e r r s s i i o o n n This command can display current version for the system. E E x x a a m m p p l l e e > sys version Router Model: Vigor2120n+ Version: 3.7.5.4_RC1 [web]English Profile version: 3.0.0 Status: 1 (0x6df0ae83) Router IP:[...]

Vigor2120 Series User’s Guide 468 off It means to turn off pulling buffer. E E x x a a m m p p l l e e > sys pollbuf on % Buffer polling is on! > sys pollbuf off % Buffer polling is off! T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s y y s s t t r r 0 0 6 6 9 9 This command can set CPE settings for applying in VigorACS. sys tr0[...]

Vigor2120 Series User’s Guide 469 3-"3 SCHEDULED", 4-"4 VALUE CHANGE", 5-"5 KICKED", 6-"6 CONNECTION REQUEST", 7-"7 TRANSFER COMPLETE", 8-"8 DIAGNOSTICS COMPLETE", 9-"M Reboot" port [port num] It means to change tr069 listen port number. cert_auth [on/off] on: turn on certifica[...]

Vigor2120 Series User’s Guide 470 T T e e l l n n e e t t C C o o m m m m a a n n d d : : s s y y s s s s i i p p _ _ a a l l g g This command can turn on/off SIP ALG (A pplication Layer Gateway) for traversal. sys sip_alg [1] sys sip_alg [0] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description 1 It means to t[...]

Vigor2120 Series User’s Guide 471 dev_chg It means to change the device key. dev_key It means to show device key. E E x x a a m m p p l l e e > sys license licifno License and Signature download interface setting: licifno [AUTO/WAN#] Ex: licifno wan1 Download interface is "auto-selected" now. T T e e l l n n e e t t C C o o m m m m a[...]

Vigor2120 Series User’s Guide 472 T T e e l l n n e e t t C C o o m m m m a a n n d d : : t t e e s s t t m m a a i i l l This command is used to display curre nt settings for sending test mail. E E x x a a m m p p l l e e > testmail Send out test mail Mail Alert:[Disable] SMTP_Server:[0.0.0.0] Mail to:[] Return-Path:[] T T e e l l n n e e t t[...]

Vigor2120 Series User’s Guide 473 PortMapLeaseDuration >>0<<, PortMapEnabled >>0<< 0<< --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- T T e e l l n n e e t t C C o o m m m m a a n n d d : : u u p p n n p p s s e e r r v v i i c c e e This command can display the[...]

Vigor2120 Series User’s Guide 474 T T e e l l n n e e t t C C o o m m m m a a n n d d : : u u p p n n p p s s u u b b s s c c r r i i b b e e This command can show all UPnP services subscribed. E E x x a a m m p p l l e e > upnp on UPNP start. > upnp subscribe Vigor> upnp subscribe >>>> (1) serviceType urn:schemas-microsoft-c[...]

Vigor2120 Series User’s Guide 475 T T e e l l n n e e t t C C o o m m m m a a n n d d : : u u p p n n p p t t m m p p v v s s This command can display current status of temp Virtual Server of your router. E E x x a a m m p p l l e e Vigor> upnp tmpvs ****************** Temp virtual server status **************** ((0)) real_addr >>192.168[...]

Vigor2120 Series User’s Guide 476 T T e e l l n n e e t t C C o o m m m m a a n n d d : : u u s s b b l l i i s s t t This command is used to display the informati on about the brand na me and model name of the USB modems which are supported by Vigor router. E E x x a a m m p p l l e e > usb list ? Brand Module Standard -----------------------[...]

Vigor2120 Series User’s Guide 477 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v i i g g b b r r g g s s t t a a t t u u s s This command can show whether the Vigor Bridge Function is enabled or disabled. E E x x a a m m p p l l e e > vigbrg status %Vigor Bridge Function is enable! %Wan1 management is disable! T T e e l l n n e e [...]

Vigor2120 Series User’s Guide 478 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v p p n n g g r r o o u u p p This command allows you to set VLAN group. You can set four VLAN groups. Please run vlan restart command after you change any settings. vlan group id [set/set_ex] [p1/p2/p3/p4/s1/s2/s3/s4][5gs1/5gs2/5g s3/5gs4] S S y y n n t t[...]

Vigor2120 Series User’s Guide 479 S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description n It means VLAN ID number. n=VLAN ID number (from 0 to 7). pri_no It means the priority of VLAN profile. pri_no=0 ~7 (from none to highest priori ty). E E x x a a m m p p l l e e > vlan pri 1 2 VLAN1: Priority=2 T T e e l[...]

Vigor2120 Series User’s Guide 480 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v l l a a n n s s u u b b n n e e t t This command is used to configure th e LAN interface used by the VLAN group. vlan subnet group_id [1/2] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description [1/2] It means interface[...]

Vigor2120 Series User’s Guide 481 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v l l a a n n t t a a g g g g e e d d This command is used to enable or di sable the incoming of untagged packets. vlan tagged [n] [on/off] vlan tagged [unlimited] [on/off] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Descr[...]

Vigor2120 Series User’s Guide 482 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v l l a a n n s s y y s s v v i i d d This command is used to modify and show the scope (reserved 64) of the VLAN IDs used internally by the system. vlan sysvid [show | n] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Descri[...]

Vigor2120 Series User’s Guide 483 aggressive It means the chosen DH group for aggressive mode pfs It means “perfect forward secrete”. on/off It means to turn on or off the PFS function. phase1 It means phase 1 of IKE. lifetime It means the lifetime value (in second) for phase 1 and phase 2. phase2 It means phase 2 of IKE. x509localid It means[...]

Vigor2120 Series User’s Guide 484 <secret> <pin> - Type the code for authentication (e.g, 1234). <secret> - Use the 32 digit-secret number generated by mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6) E E x x a a m m p p l l e e > vpn dinset 1 Dial-in profile index 1 Profile Name: ??? Status: Deactive Mobile OTP: Disable[...]

Vigor2120 Series User’s Guide 485 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v p p n n s s u u b b n n e e t t This command allows users to specify a subnet selection for the specified remote dial-in VPN profile. vpn subnet [index] [1/2] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description <i[...]

Vigor2120 Series User’s Guide 486 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v p p n n s s e e t t u u p p This command allows users to setup VPN for different types. Command of PPTP Dial-Out vpn setup <index> <name> pptp_out <ip> <usr> <pwd> <nip> <nmas k> Command of IPSec Dial-Out vpn set[...]

Vigor2120 Series User’s Guide 487 e.g.,, vpn setup 1 name1 l2tp_ou t 1.2.3.4 vigor 1234 192.1 68.1.0 255.255.255. 0 For Dial-In <index> It means the index number of the profile. <name> It means the name of the profile. <ip> It means the IP address allowed to dial in. <usr> <pwd > It means the user and the password re[...]

Vigor2120 Series User’s Guide 488 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v p p n n o o p p t t i i o o n n This command allows users to configure settings for LAN to LAN profile. vpn option <index> <cmd1>=<param1> [ <cmd2>=<para2> | ... ] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i [...]

Vigor2120 Series User’s Guide 489 “ctype=t” means PPTP. “ctype=s” means IPSec. “ctype= l” means L2TP(IPSec Policy None). “ctype= l1” means L2TP(IPSec Policy Nice to Have). “ctype= l2” means L2TP(IPSec Policy Must). dialto It means Server IP/Host Name for VPN. (such as draytek.com or 123.45.67.89). ltype It means Link Type. “[...]

Vigor2120 Series User’s Guide 490 “itype=L1”means L2TP (None). “itype=L1” means L2TP(Nice to Have). “itype=l2” means L2TP(Must). peer It means specify Peer VPN Server IP for Remote VPN Gateway. Type “203.12.23.48” means to allow VPN dial-in with IP address of 203.12.23.48. Type “off” means any remote IP is allowed to dial in. [...]

Vigor2120 Series User’s Guide 491 droute It means to Change default route to this VPN tunnel ( Only single WAN supports this). droute=on/off means to enable/disable the function. E E x x a a m m p p l l e e > vpn option 1 idle=250 % Change Log.. % Idle Timeout = 250 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v p p n n m m r r o [...]

Vigor2120 Series User’s Guide 492 Parameter Description all It means to list configuration of the specified profile. com It means to list common settings of the specified profile. out It means to list dial-out settings of the specified profile. in It means to list dial-in settings of the specified profile. net It means to list Network Settings of[...]

Vigor2120 Series User’s Guide 493 % PING to keep alive : off > T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v p p n n r r e e m m o o t t e e This command allows users to enable or disable PPTP/IPSec/L2TP VPN service. vpn remote [PPTP/IPSec/L2TP] [on/off] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Paramete[...]

Vigor2120 Series User’s Guide 494 L2l means LAN-to-LAN Profile. Specify which one will be applied by NetBios. <index> The index number of the profile. <Block/Pass> Pass – Have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connecting. Block – When there is conflict occurred between the[...]

Vigor2120 Series User’s Guide 495 % VPN TCP maximum segment size (MSS) : PPTP = 1400 L2TP = 1360 IPSec = 1360 L2TP over IPSec = 1360 >vpn mss show VPN TCP maximum segment size (MSS) : PPTP = 1400 L2TP = 1360 IPSec = 1360 L2TP over IPSec = 1360 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v p p n n i i k k e e This command is used [...]

Vigor2120 Series User’s Guide 496 T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v p p n n p p a a s s s s 2 2 n n d d This command allows users to determine if the packets coming from the second subnet passing through current used VPN tunnel. vpn pass2nd [on] vpn pass2nd [off] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i [...]

Vigor2120 Series User’s Guide 497 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w a a n n p p p p p p _ _ m m r r u u This command allows users to adjust the si ze of PPP LCP MRU. It is used for specific network. wan ppp_mru <WAN interface number> <MRU size > S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o [...]

Vigor2120 Series User’s Guide 498 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w a a n n D D F F _ _ c c h h e e c c k k This command allows you to enable or di sable the function of DF (Don’t fragm ent) wan DF_check [on] wan DF_check [of f] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description o[...]

Vigor2120 Series User’s Guide 499 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w a a n n s s t t a a t t u u s s This command allows you to display the status of WAN connection, including connection mode, TX/RX packets, DNS settings and IP address. E E x x a a m m p p l l e e > wan status WAN1: Offline, stall=N Mode: ---, Up Time=[...]

Vigor2120 Series User’s Guide 500 init2[string] It means to set initial2 modem AT command. string: type text. dial [string] It means to set dial modem AT command. string: type the command (default: ATDT*99#). pin [string] It means to set PIN code (0: disable) on SIM card. If “0” is typed, it means disable the function. string: type the PIN co[...]

Vigor2120 Series User’s Guide 501 off It means to disable WAN 3G/4G DHCP mode. E E x x a a m m p p l l e e > wan wimax ? Current status is wimax OFF > wan wimax on > T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w a a n n d d e e t t e e c c t t This command allows you to Ping a specified IP to detect the WAN connection (stat[...]

Vigor2120 Series User’s Guide 502 > wan detect status WAN1: on, Target=192.168.1.78, TTL=255 WAN2: off WAN3: off WAN4: off WAN5: off > T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w a a n n l l b b This command allows you to Enable/Disable for each WAN to join auto load balance member. wan lb [wan1/wan2/…] on wan lb [wan1/wan[...]

Vigor2120 Series User’s Guide 503 on/off It means to turn on/off bridge mode for the specific channel. clear It means to turn off/clear the port. tag tag_no It means to tag a number for the VLAN. -1: No need to add tag number. 1-4095: Available setting numbers used as tagged nu mber. service type It means to specify the service type for VLAN. 0: [...]

Vigor2120 Series User’s Guide 504 E E x x a a m m p p l l e e > wan multifno 5 1 % Configured channel 5 uplink to WAN1 > wan multifno status % Channel 3 uplink ifno: 3 % Channel 4 uplink ifno: 3 % Channel 5 uplink ifno: 3 % Channel 6 uplink ifno: 3 % Channel 7 uplink ifno: 3 > T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w a[...]

Vigor2120 Series User’s Guide 505 %Interface Pri Tag Enabled %====================================== %WAN1 0 50 v %WAN2 0 60 v > wan vlan wan 2 disable % Disabled VLAN header encap for WAN2 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w a a n n f f i i b b e e r r This command allows you to configure the transmission rate for fibe[...]

Vigor2120 Series User’s Guide 506 3: SSID3 4: SSID4 -m <message> It means the wireless client will be redirected to a page with message when the client accesses into Internet. message: type the text to be displayed. -u <url> It means the wireless client will be redirecte to a page with URL specifeied here when the client access into t[...]

Vigor2120 Series User’s Guide 507 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w l l a a c c l l This command allows the user to c onfigure wireless access control settings. wl acl enable [ssid1 ssid2 ssid3 ssid4] wl acl disable [ssid1 ssid2 ssid3 ssid4] wl acl add [MAC] [ssid1 ssid2 ssid3 ssid4] [isolate] wl acl del [MAC] wl acl mod[...]

Vigor2120 Series User’s Guide 508 ----------Enable Mac Address Filter--------- ssid1: dis ssid2: dis ssi d3: dis ssid4: dis ----------MAC Address Filter---------- Index Attribute MAC Address Associated SSIDs 0 00:50:70:ff:12:70 ssid1 ssid2 ssid3 ssid4 1 s 00:50:70:ff:12:70 ssid1 ssid2 s: Isolate the station from LAN > T T e e l l n n e e t t C[...]

Vigor2120 Series User’s Guide 509 field. However, some original 11b wireless network devices only support long preamble. 0: disable to use long preamble. 1: enable to use long preamble. txburst [enable] It means to enhance the performance in data transmission about 40%* more (by enabling Tx Burst ). It is active only when both sides of Access Poi[...]

Vigor2120 Series User’s Guide 510 isolate [ssid_num lan member] It means to isolate the wire less connection for LAN and/or Member. lan – It can make the wireless clients (stations) with remote-dial and LAN to LAN users not accessing for each other. member – It can make the wireless clients (stations) with the same SSID not accessing for each[...]

Vigor2120 Series User’s Guide 511 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w l l s s e e t t This command allows users to configure basic wireless settings. wl set [SSID] [ CHA N[E n]] wl set txburst [enable] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description SSID It means to type the SSID f[...]

Vigor2120 Series User’s Guide 512 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w l l s s t t a a m m g g t t This command is used to configure connecti on time and reconnection time for each SSID that wireless client used for accessing into Internet. wl stamgt [enable/disable] [ssid_num] wl stamgt [show] [ssid_num ] wl stamgt set [ss[...]

Vigor2120 Series User’s Guide 513 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w l l i i s s o o _ _ v v p p n n This command allows users to activate the function of VPN isolation. wl iso_vpn [ssi d] [En] S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description ssid It means the number of SSID. 1: SS[...]

Vigor2120 Series User’s Guide 514 show It displays current status of WMM. QueIdx It means the number of the queue which the WMM settings will be applied to. There are four queues, best effort, background, voice, and video. Aifsn It controls how long the client waits for each data transmission. Cwmin/ Cwmax CWMin means contention Window-Min and CW[...]

Vigor2120 Series User’s Guide 515 wl ht greenfield value S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n Parameter Description wl ht bw value The value you can type is 0 (for BW_20) and 1 (for BW_40). wl ht gi value The value you can type is 0 (for GI_800) and 1 (for G I_4001) wl ht badecline value The value you can type is 0 [...]

Vigor2120 Series User’s Guide 516 value 0: disable 1: enable E E x x a a m m p p l l e e > wl btnctl 1 Enable wireless botton control Current wireless botton control is on > T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w l l i i w w p p r r i i v v It is reserved for RD debug. Do not use it. T T e e l l n n e e t t C C o o m m [...]

Vigor2120 Series User’s Guide 517 client (identified with the MAC address) from LAN. del[MAC] It means to delete a MAC address entry defined in the access control list. [MAC] form at: xx-xx-xx-xx-xx-xx or xx:xx:xx:xx:xx:xx or xx.xx.xx.xx.xx.xx mode [ssid1 ssid2 ssid3 ssid4] [white/black] It means to set white/black list for each SSID. show It mea[...]

[...]

Vigor2120 Series User’s Guide 519 …. Number=52, means Channel 52. channel show It means to display what the current channel is. preamble [enable] It means to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync field instead of long preamble with 128 bit s ync field. However,[...]

Vigor2120 Series User’s Guide 520 SSID3 or SSID4. enable : It means to enable such function. 0: disable and 1:enable. isolate vpn [ssid_num enable] It means to isolate the wireless connection from VPN. ssid_num: Choose 1, 2, 3 or 4 to specify SSID1, SSID2, SSID3 or SSID4. enable : It means to enable such function. 0: disable and 1:enable. isolate[...]

Vigor2120 Series User’s Guide 521 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w l l d d u u a a l l s s e e c c u u r r i i t t y y This command allows users to configure security settings for the wirelesss connection (5GHz). wl dual security [SSID_NUMBER] [mode][key][index] wl dual security show S S y y n n t t a a x x D D e e s s [...]

Vigor2120 Series User’s Guide 522 T T e e l l n n e e t t C C o o m m m m a a n n d d : : w w l l d d u u a a l l s s t t a a l l i i s s t t This command is used to display the wirel ess station which accessing Internet via Vigor2120. wl dual stalist E E x x a a m m p p l l e e > wl dual stalist 5G Wireless Station List : SSID MAC Address Sta[...]

Vigor2120 Series User’s Guide 523 wpa2psk [key]: WPA2/PSK key : Moreover, you have to add keys for wpapsk, wpa2psk, and wep , and specify index number of schedule profiles to be followed by the wireless connection. WEP keys must be in 5/13 ASCII text string or 10/2 6 Hexadecimal digit format; WPA keys must be in 8~63 ASCII text string or 64 Hexad[...]