Draytek 2910 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Draytek 2910, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Draytek 2910 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Draytek 2910. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Draytek 2910 should contain:
- informations concerning technical data of Draytek 2910
- name of the manufacturer and a year of construction of the Draytek 2910 item
- rules of operation, control and maintenance of the Draytek 2910 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Draytek 2910 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Draytek 2910, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Draytek service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Draytek 2910.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Draytek 2910 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    Vigor2910 Dual-WAN Security Router User’s Guide Version: 3.2 Date: 2007/10/01 Copyright 2007 All rights reserve d. This publication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval syst em, or translated into any lang u age without written permission from the copyrigh[...]

  • Page 2

    Vigor2910 Series User’s Guide ii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1 1.[...]

  • Page 3

    Vigor2910 Series User’s Guide iii 3.4 Objects and Groups ......................................................................................................... ..... 57 3.4.1 IP Object ................................................................................................................ ......... 57 3.4.2 IP Group ...................[...]

  • Page 4

    Vigor2910 Series User’s Guide iv 3.12.4 Access Control .......................................................................................................... .. 158 3.12.5 WDS..................................................................................................................... ....... 159 3.12.6 AP Di scovery ..................[...]

  • Page 5

    Vigor2910 Series User’s Guide v 5 T rouble Shoot ing ........................................................................................... 221 5.1 Checking If the Hardware S tatus Is OK or No t.................................................................... 221 5.2 Checking If the Network Connection Settings on Y our Computer Is OK or N[...]

  • Page 6

    [...]

  • Page 7

    Vigor2910 Series User’s Guide 1 1 P P r r e e f f a a c c e e The Vigor2910 series router provides Dual-WAN interface (which is a configuration second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (SuperG TM ). Object-oriented fire[...]

  • Page 8

    Vigor2910 Series User’s Guide 2 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powered of f. DMZ On DMZ Host is specified in cert ain site. On The QoS func[...]

  • Page 9

    Vigor2910 Series User’s Guide 3 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe red off. DMZ On DMZ Host is specified in cert ain site. On The QoS f[...]

  • Page 10

    Vigor2910 Series User’s Guide 4 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 i i L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powered of f. On The ISDN network is correctly setup. ISDN Blinkin g A s[...]

  • Page 11

    Vigor2910 Series User’s Guide 5 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinkin g The router is powere d on and running pr ope rly. ACT (Activity) Off The router is powe red off. DMZ On DMZ Host is specified in cert ain site. On The phon[...]

  • Page 12

    Vigor2910 Series User’s Guide 6 1 1 . . 2 2 . . 5 5 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V G G L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is p owered off. DMZ On DMZ Host is specified in cert ain site. On The p[...]

  • Page 13

    Vigor2910 Series User’s Guide 7 1 1 . . 2 2 . . 6 6 F F o o r r V V i i g g o o r r 2 2 9 9 1 1 0 0 V V G G i i L L E E D D E E x x p p l l a a n n a a t t i i o o n n LED Status Explanation Blinking The router is powere d on and running pr ope rly. ACT (Activity) Off The router is p owered off. On The ISDN network is correctly setup. ISDN Blinki[...]

  • Page 14

    Vigor2910 Series User’s Guide 8 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect this device to a router/modem with an Ethernet cable. 2. Connect one port of 4-port switch to your computer with a RJ-45 cable. [...]

  • Page 15

    Vigor2910 Series User’s Guide 9 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The exam ple provided here is made based on Windows XP/2000. For Windows 98/SE, please visit w[...]

  • Page 16

    Vigor2910 Series User’s Guide 10 3. Open File->Add a New Computer . A welcome dialog will appear. Please click Next . 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port . Click Next .[...]

  • Page 17

    Vigor2910 Series User’s Guide 11 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port nam e. Then, click Next . 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish .[...]

  • Page 18

    Vigor2910 Series User’s Guide 12 9. Now, your system will ask you t o choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next . 10. For the final stage, you need to g o back to Control Panel-> Printers and edit the property of the new [...]

  • Page 19

    Vigor2910 Series User’s Guide 13 Note 1: Some printers with the fax/scanning or othe r additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support Center->FAQ->Sort by product ; select the model of the router and click on it; fin[...]

  • Page 20

    Vigor2910 Series User’s Guide 14[...]

  • Page 21

    Vigor2910 Series User’s Guide 15 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator and [...]

  • Page 22

    Vigor2910 Series User’s Guide 16 3. Now, the Main Screen will pop up. Notice that the main screen differs according to the model of the router that you have. Below is an example. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type a new one in[...]

  • Page 23

    Vigor2910 Series User’s Guide 17 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After ty ping the passwor[...]

  • Page 24

    Vigor2910 Series User’s Guide 18 On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. Fo r example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. In the Quick Start Wizard , you can configure the router to access the I[...]

  • Page 25

    Vigor2910 Series User’s Guide 19 User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password for confirmation. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system statu[...]

  • Page 26

    Vigor2910 Series User’s Guide 20 2 2 . . 2 2 . . 2 2 P P P P T T P P Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.[...]

  • Page 27

    Vigor2910 Series User’s Guide 21 2 2 . . 2 2 . . 3 3 S S t t a a t t i i c c I I P P Click Static IP as the protocol. Type in all the inform ation that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the [...]

  • Page 28

    Vigor2910 Series User’s Guide 22 2 2 . . 2 2 . . 4 4 L L 2 2 T T P P Click L2TP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this [...]

  • Page 29

    Vigor2910 Series User’s Guide 23 2 2 . . 2 2 . . 5 5 D D H H C C P P Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this [...]

  • Page 30

    Vigor2910 Series User’s Guide 24 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE as the protocol, you will find out a button of Dial PPPoE or Dial PPPoE i n the Online Status web page. O[...]

  • Page 31

    Vigor2910 Series User’s Guide 25 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface.[...]

  • Page 32

    Vigor2910 Series User’s Guide 26 2 2 . . 4 4 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your setti[...]

  • Page 33

    Vigor2910 Series User’s Guide 27 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed infor[...]

  • Page 34

    Vigor2910 Series User’s Guide 28 3 3 . . 1 1 . . 2 2 N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n b b y y 3 3 G G U U S S B B M M o o d d e e m m For 3G mobile communication through Access Point is popular more and more, Vigor 2910 adds the function of 3G network connection for such purpose. By connecting 3G USB Modem to th[...]

  • Page 35

    Vigor2910 Series User’s Guide 29 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface. Display Name Type the description for the WAN1/WAN2 interface. Physical Mode For WAN1, the physical connection is done and fixed through Ethernet port; yet the physical connection for WAN2 is [...]

  • Page 36

    Vigor2910 Series User’s Guide 30 Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the best load balance. Line Speed If your choose According to Line Speed as the Load Balance Mode , please type the line s[...]

  • Page 37

    Vigor2910 Series User’s Guide 31 3 3 . . 1 1 . . 4 4 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent Physical Mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly. Ind[...]

  • Page 38

    Vigor2910 Series User’s Guide 32 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E To use PPPoE as the accessing protocol of the internet, please choose Internet Acce ss fro m WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown. PPPoE Client Mode Click Enable for activating this function. If [...]

  • Page 39

    Vigor2910 Series User’s Guide 33 Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. WAN Connection Detection Such function allows you to ve rify whether network connection is alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the sys[...]

  • Page 40

    Vigor2910 Series User’s Guide 34 Specify a MAC Address – Type the MAC address f or the router manually. After finishing all the settings here, please click OK to activate them. D D e e t t a a i i l l s s P P a a g g e e f f o o r r S S t t a a t t i i c c o o r r D D y y n n a a m m i i c c I I P P For static IP mode, you usually receive a fix[...]

  • Page 41

    Vigor2910 Series User’s Guide 35 None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. Always On - If the broadband connection is no longer available, the backup line will be activated automatically and always on until the broadband connection[...]

  • Page 42

    Vigor2910 Series User’s Guide 36 Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode. Router Name : Type in the router name provided by ISP. Domain Name : Type in the domain name that you have assigned. Specify an IP address – Click this radio button to specify some [...]

  • Page 43

    Vigor2910 Series User’s Guide 37 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P T T P P / / L L 2 2 T T P P To use PPTP as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPTP mode for WAN2. The following web page will be shown. PPTP/L2TP Client Mode Enable PPTP- Click this radio [...]

  • Page 44

    Vigor2910 Series User’s Guide 38 PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for PPP. Idle Timeout - Set the timeout for breaking down the Internet after passing through the time without any action. This setting is active only when the Active on demand option for Active Mode is selected in WAN>> General Setup page. IP Addr[...]

  • Page 45

    Vigor2910 Series User’s Guide 39 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P To use PPP (for 3G USB Modem) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPP mode for WAN2. The following web page will be shown. PPP Client Mode Click Enable to activate this mode for WAN2[...]

  • Page 46

    Vigor2910 Series User’s Guide 40 Index Click the number of index to access into the load-balance policy configuration web page. Enable Check this box to enable this policy. Protocol Use the drop-down menu to change the protocol for t he WAN interface. WAN Use the drop-down menu to change the WAN interface. Src IP Start Displays the IP address for[...]

  • Page 47

    Vigor2910 Series User’s Guide 41 Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Binding WAN interface Choose the WAN interface (WAN1 or WAN2) for binding. Src IP Start Type the source IP start for the specified WAN interface. Src IP End Type the source IP end for the[...]

  • Page 48

    Vigor2910 Series User’s Guide 42 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what t ype of public IP addresses coming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router is[...]

  • Page 49

    Vigor2910 Series User’s Guide 43 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the r[...]

  • Page 50

    Vigor2910 Series User’s Guide 44 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask T [...]

  • Page 51

    Vigor2910 Series User’s Guide 45 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.1 35.240.1, the starting IP address must be 220.135.240.2 or greater , but smaller than 220.135.240. 254. IP Pool Counts: Enter the number of IP addresses[...]

  • Page 52

    Vigor2910 Series User’s Guide 46 of the router , which means the router is the default gateway . DHCP Server IP Addr ess for Relay Agent - Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Interne[...]

  • Page 53

    Vigor2910 Series User’s Guide 47 Index The number (1 to 10) unde r Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i[...]

  • Page 54

    Vigor2910 Series User’s Guide 48 Note : There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet (192. 168.1.0/24). The second is that those hosts on the internal private subnets (e x. 192.168.10.0/24) can access [...]

  • Page 55

    Vigor2910 Series User’s Guide 49 3 3 . . 2 2 . . 4 4 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthen control i n network. When this functi on is enabled, all the assigne d IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC addres[...]

  • Page 56

    Vigor2910 Series User’s Guide 50 Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List . Edit It allows you to edit and modify the selected IP address and MAC address that you create before. Delete You can remove any item listed in IP Bind List . Simply click and se[...]

  • Page 57

    Vigor2910 Series User’s Guide 51 Since the server is actually located inside th e LAN, the network well protected by NAT of the router, and identified by its private IP address/port, the goal of Po rt Redirection function is to forward all access request with public IP address from external users to the mapping private IP address/port of the serv[...]

  • Page 58

    Vigor2910 Series User’s Guide 52 Public Port Specify which port can be redirected to the specified Private IP and Port of the internal host. If you choose Range as the port redirection mode, you will see two boxes on this field. Simply type the required number on the first box. The second one will be assigned automatically later. Private IP Speci[...]

  • Page 59

    Vigor2910 Series User’s Guide 53 clients will continue to work w ithout inappropriate interruption. DMZ Ho s t allows a defined internal user to be totally exposed to th e Internet, which usually helps some special applications such as Netmeeting or Internet Games etc. The inherent security properties of NA T are somewhat bypassed if you set up D[...]

  • Page 60

    Vigor2910 Series User’s Guide 54 MAC Address of the True IP DMZ Host If you choose Active True IP as the selection for DMZ host, please type in MAC address in these fields. If you previously have set up WAN IP Alias on WAN1 interface while configuring PPPoE, Static or Dynamic IP or PPTP ( by accessing into WAN>>Internet Ac cess), you will f[...]

  • Page 61

    Vigor2910 Series User’s Guide 55 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application [...]

  • Page 62

    Vigor2910 Series User’s Guide 56 To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Enable Open Ports Check to enable this entry. Comment Make a name for the define d network application/service. WAN Interface Specify t[...]

  • Page 63

    Vigor2910 Series User’s Guide 57 3 3 . . 4 4 O O b b j j e e c c t t s s a a n n d d G G r r o o u u p p s s For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that obje[...]

  • Page 64

    Vigor2910 Series User’s Guide 58 Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address. If you choose LAN as the Interface here, and choose LAN as the direction setting in Edit Filter Rule , then all the IP addresses specif[...]

  • Page 65

    Vigor2910 Series User’s Guide 59 3 3 . . 4 4 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN [...]

  • Page 66

    Vigor2910 Series User’s Guide 60 3 3 . . 4 4 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index co lumn for settings in detail. Name Type a name for this profile. Protocol Sp[...]

  • Page 67

    Vigor2910 Series User’s Guide 61 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when th e first and last values are different, it indicates that all the ports except the range defined here are available for this service type. (>) – the port number greater than this value is avail[...]

  • Page 68

    Vigor2910 Series User’s Guide 62 Name Type a name for this profile. Available Service Type Objects You can add IP objects from IP Objects page. All the available IP objects will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box. 3 3 . . 4 4 . . 5 5 C C S S M M P P r r o o f f i i [...]

  • Page 69

    Vigor2910 Series User’s Guide 63 Profile Name Type a name for the CSM profile. The profile name will be shown on the Content Security Management drop down list in the pages of Firewall>>General Setup and Firewall>>Edit Filter Set>>Edit Filter Rule. There are several items for IM, VoIP, P2P provided here for you to choose to disa[...]

  • Page 70

    Vigor2910 Series User’s Guide 64 3 3 . . 5 5 F F i i r r e e w w a a l l l l 3 3 . . 5 5 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor[...]

  • Page 71

    Vigor2910 Series User’s Guide 65 I I P P F F i i l l t t e e r r s s Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter . z Call Filter - When there is no existing Internet connection, Call Fi[...]

  • Page 72

    Vigor2910 Series User’s Guide 66 C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n t t ( ( C C S S M M ) ) As the popularity of all kinds of instant messenger application arises, communication cannot become much easier. Nevertheless, while some i ndustry may leverage this as a great tool to connect wi[...]

  • Page 73

    Vigor2910 Series User’s Guide 67 W W e e b b F F i i l l t t e e r r i i n n g g We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible pare nt or employer, you should protect those in your trust against the hazards. With Web filtering service of the Vigor router, you can prote[...]

  • Page 74

    Vigor2910 Series User’s Guide 68 Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Filter Default rule is applied in this page. Pass – All the packets are allowed to pass throu[...]

  • Page 75

    Vigor2910 Series User’s Guide 69 Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the button will open Edit Filter Rule web page. For the detailed information, refer to the following page. Active Enable or disable the filter rule. Comment Enter filter set comments/description. Maximum length is 23–character long. Move [...]

  • Page 76

    Vigor2910 Series User’s Guide 70 Applications >> Schedule setup. The default setting of this filed is blank and the function will always work. Direction Set the direction of packet flow (LAN->WAN/WAN->LAN). It is for Data Filter only. For the Call Filter , this setting is not available since Call Filter is only applied to outgoing tra[...]

  • Page 77

    Vigor2910 Series User’s Guide 71 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In ad dition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply [...]

  • Page 78

    Vigor2910 Series User’s Guide 72 For troubleshooting needs, you can specify to record Filter information by checking the Syslog box. It will be sent to Syslog server . Please refer to secti on 3.14.4 Syslog/Mail Alert for m ore detailed information. Branch to other Filter Set If the packet matches the filter rule , the next filter rule will branc[...]

  • Page 79

    Vigor2910 Series User’s Guide 73[...]

  • Page 80

    Vigor2910 Series User’s Guide 74 3 3 . . 5 5 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defense [...]

  • Page 81

    Vigor2910 Series User’s Guide 75 port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router will ignore any IP packets with IP option field in the datagram header. The r[...]

  • Page 82

    Vigor2910 Series User’s Guide 76 SYN packets with the identical source and destination addresses, as well as the port number to victims. Block Unknown Protocol Check the box to activate the Block Unknown Protocol function. Individual IP packet has a protocol field in the datagram header to indicate the protocol type running over the upper layer. [...]

  • Page 83

    Vigor2910 Series User’s Guide 77 3 3 . . 5 5 . . 5 5 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r Based on the list of user defined keywords, the URL Content Filter facility in Vigor router inspects the URL string in every outgoing HTTP request. No matter the URL string is found full or partial matched with a keyword, th e Vigo[...]

  • Page 84

    Vigor2910 Series User’s Guide 78 decline the connection request to the website whose URL string matched to any user-defined keyword. It should be noticed that the more simplified the blocking ke yword list, the more efficiently the Vigor router perform. Prevent web access from IP address Check the box to deny any web surfing activity using IP add[...]

  • Page 85

    Vigor2910 Series User’s Guide 79 3 3 . . 5 5 . . 6 6 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r Click Firewall and click Web Content Filter to open the setup page. For this section, please refer to Web Content Filter user’s guide.[...]

  • Page 86

    Vigor2910 Series User’s Guide 80 3 3 . . 6 6 B B a a n n d d w w i i d d t t h h M M a a n n a a g g e e m m e e n n t t Below shows the menu items for Bandwidth Management. 3 3 . . 6 6 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router. The router will generate the r[...]

  • Page 87

    Vigor2910 Series User’s Guide 81 Maximum Sessions Defines the available session number for specific range of IP addresses. If you do not set the session number in this field, the system will use the defa ult session limit for the specific limitation you set for each index. Add Adds the specific session limitation onto the list above. Edit Allows [...]

  • Page 88

    Vigor2910 Series User’s Guide 82 Limitation List Display a list of specific limitations that you set on this web page. Start IP Define the start IP address for limit bandwidth. End IP Define the end IP address for limit bandwidth. TX limit Define the limitation for the speed of the upstream. If you do not set the limit in this field, the system w[...]

  • Page 89

    Vigor2910 Series User’s Guide 83 In a QoS-enabled network, or Differentiated Service (DiffServ or DS) framework, a DS domain owner should sign a Service License Agreement (SLA) with other DS domain owners to define the service level provided to ward traffic from different domains. Then each DS node in these domains will perform the priority treat[...]

  • Page 90

    Vigor2910 Series User’s Guide 84 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK , then click Setup[...]

  • Page 91

    Vigor2910 Series User’s Guide 85 On Line Statistics Display an online statistics for quality of service for your reference. E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click[...]

  • Page 92

    Vigor2910 Series User’s Guide 86 For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Source Address Click the SrcEdit button to set the source address for the rule. Destination Address Click the DestEdit button to set the destination address for the rule. SrcEdit/DestEdit It allows you to edit[...]

  • Page 93

    Vigor2910 Series User’s Guide 87 E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. For adding [...]

  • Page 94

    Vigor2910 Series User’s Guide 88 Service Name Type in a new service for your request. Service Type Choose the t ype (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range . If you select Range, you have to type in the starting port number and the end porting num ber on the boxes below. Port Number – Type in the star[...]

  • Page 95

    Vigor2910 Series User’s Guide 89 3 3 . . 7 7 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 7 7 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address assigned to y[...]

  • Page 96

    Vigor2910 Series User’s Guide 90 Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server. 3. Select Index number 1 to add an account for the router. Check Enable D[...]

  • Page 97

    Vigor2910 Series User’s Guide 91 In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. 3 3 . . 7 7 . . 2 2 S S c c h h e e d d u u l l e e The Vigor router has a built-in real time clock which can update itself manually or automatically by means of Network Time Protocols (NTP). As [...]

  • Page 98

    Vigor2910 Series User’s Guide 92 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply during[...]

  • Page 99

    Vigor2910 Series User’s Guide 93 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE In ternet access profile. Now , the PPPoE Internet connection will follow the schedule order to perform For ce On or Force Down action according to the time plan that has been pre-defined in the sched[...]

  • Page 100

    Vigor2910 Series User’s Guide 94 3 3 . . 7 7 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT routers[...]

  • Page 101

    Vigor2910 Series User’s Guide 95 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Softw are Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will blo ck the accessing ability of some network ports. Security Considerations Activating [...]

  • Page 102

    Vigor2910 Series User’s Guide 96 Wake by Two types provide for you to wake up the binded IP . If you choose Wake by MAC Address, you have to type the correct MAC address of the host in MAC Address boxes. If you choose Wake by IP Address, you have to choose the correct IP address. IP Address The IP addresses that have been configured in Firewall&g[...]

  • Page 103

    Vigor2910 Series User’s Guide 97 3 3 . . 8 8 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like th e Internet. In short, by VPN technology, you can send data between two computers across a shared [...]

  • Page 104

    Vigor2910 Series User’s Guide 98 Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP or CHAP Selecting this option means the router will attem pt to authenticate dial-in users with th e CHAP protocol first. If the dial-in user does not support this protocol, it will f[...]

  • Page 105

    Vigor2910 Series User’s Guide 99 3 3 . . 8 8 . . 3 3 I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration. There are two phases of IPSec. ¾ Phase 1: negotiation of IKE parameters including encryption, hash, Diffie-Hellman parameter values, and lifetime to protect t[...]

  • Page 106

    Vigor2910 Series User’s Guide 100 active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. 3 3 . . 8 8 . . 4 4 I I P P S S e e c c P P e e e e r r I I d d e e n n t t i i t t y y To use digital [...]

  • Page 107

    Vigor2910 Series User’s Guide 101 Profile Name Type in a name in this file. Enable this account Check this box to enable su ch profile. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can[...]

  • Page 108

    Vigor2910 Series User’s Guide 102 3 3 . . 8 8 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection. You may set parameters including specified connection peer ID, con[...]

  • Page 109

    Vigor2910 Series User’s Guide 103 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback function b[...]

  • Page 110

    Vigor2910 Series User’s Guide 104 select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. IKE A[...]

  • Page 111

    Vigor2910 Series User’s Guide 105 3 3 . . 8 8 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including sp ecified connection direction (dial-in or dial-out), connection peer ID, connection type (ISDN connection, VPN connection - including PPT[...]

  • Page 112

    Vigor2910 Series User’s Guide 106 Click each index to edit each profile and y ou will get the following page. Each LAN-to-LAN profile includes 4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. When VPN TRUNK is activated, several fields (e.g., Dial[...]

  • Page 113

    Vigor2910 Series User’s Guide 107 VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router will use WAN1 as the first channel for VPN connection. If WAN1 fails, the router will use another WAN interface instead. WAN1 Only - [...]

  • Page 114

    Vigor2910 Series User’s Guide 108 of remote server. You can further set up Callback (CBCP) function below. This feature is useful for i model only. PPTP Build a PPTP VPN connection to the server through the Internet. You should set the identity like User Name and Password below for the authentication of remote server. IPSec Tunnel Build an IPSec [...]

  • Page 115

    Vigor2910 Series User’s Guide 109 algorithm and apply MD5 or SHA-1 authentication algorithm. AES without Authentication -Use AES encryption algorithm and not apply any authentication scheme. AES with Authentication- Use AES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. Advanced Specify mode, proposal and key life of each I[...]

  • Page 116

    Vigor2910 Series User’s Guide 110 IKE phase 2 proposal- To propose the local available algorithms to the VPN peers, and get its feedback to find a match. Three combinations are available for both modes. We suggest you select the combination that covers the most algorithms. IKE phase 1 key lifetime- For security reason, the lifetime of key should [...]

  • Page 117

    Vigor2910 Series User’s Guide 111 Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for i model only. In addition, you can further set up Callback function below. PPTP Allow the[...]

  • Page 118

    Vigor2910 Series User’s Guide 112 VPN Gateway peer ID (should be the same with the ID setting in dial-in type) by checking the box. Enter Peer ISDN number if you select ISDN above (This feature is useful for i model only.). Also, you should further specify the corresponding security methods on the right side. If you uncheck the checkbox , the con[...]

  • Page 119

    Vigor2910 Series User’s Guide 113 automatically per callback connection. The default value 0 means no limitation of callback period. My WAN IP This field is only applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. The default value is 0.0.0.0, which means the Vigor router will get a PPP IP address from the remote rou[...]

  • Page 120

    Vigor2910 Series User’s Guide 114 3 3 . . 8 8 . . 7 7 V V P P N N T T R R U U N N K K M M a a n n a a g g e e m m e e n n t t VPN TRUNK Management is a backup mechanis m to set multiple VPN tunnels for using as backup tunnel. It can assure the network connection would not be cut off due to network environment blocked by any reason. F F e e a a t [...]

  • Page 121

    Vigor2910 Series User’s Guide 115 field) ”x” means such profile is disabled. Name (on Backup Profile field) Display the name of VPN TRUNK profile. Member1 (on Backup Profile field) Display the dial-out profile selected from the Member1 drop down list below. Active (on Backup Profile field) “Yes” means normal condition. ”No” means the [...]

  • Page 122

    Vigor2910 Series User’s Guide 116 T T i i m m e e f f o o r r a a c c t t i i v v a a t t i i n n g g V V P P N N T T R R U U N N K K p p r r o o f f i i l l e e VPN TRUNK backup will be activated automati cally after the initial connection of single VPN Tunnel off-line. The content in Member1/2 within VPN TRUNK backup profile is similar to dial-[...]

  • Page 123

    Vigor2910 Series User’s Guide 117 3 3 . . 8 8 . . 8 8 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You m ay also aggressively Dial-out by using Dial-out Tool and clicking Dial button. General Mod[...]

  • Page 124

    Vigor2910 Series User’s Guide 118 Refresh Seconds Choose the time for refresh the dial inform ation among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Note: The status of LAN to LAN for ISDN is shown on the page of Online Status .[...]

  • Page 125

    Vigor2910 Series User’s Guide 119 3 3 . . 9 9 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc., and the digital signature of the ce[...]

  • Page 126

    Vigor2910 Series User’s Guide 120 Type in all the information that the window request. Then click Generate again. Import Click this button to im port a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After [...]

  • Page 127

    Vigor2910 Series User’s Guide 121 3 3 . . 9 9 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. Then[...]

  • Page 128

    Vigor2910 Series User’s Guide 122 3 3 . . 9 9 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them . If you want to set encryption password for these certificates, please type c[...]

  • Page 129

    Vigor2910 Series User’s Guide 123 3 3 . . 1 1 0 0 V V o o I I P P Voice over IP network (VoIP) enables you to use your broadband Internet connection to make toll quality voice calls over the Internet. There are many different call signaling protocols, methods by which VoIP devices can talk to each other. The most popular protocols are SIP, MGCP, [...]

  • Page 130

    Vigor2910 Series User’s Guide 124 only have to using dial plan or directly dial your friend’s account name if you are with the same SIP Registrar. Please refer to the section 4.5.1. z Peer-to-Peer Before calling, you have to know your friend’s IP Address. The Vigor VoIP Routers will build connection between each other. Please refer to the sec[...]

  • Page 131

    Vigor2910 Series User’s Guide 125 Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your frien[...]

  • Page 132

    Vigor2910 Series User’s Guide 126 This page will differ for different models. Below is a sample page obtained from Vigor 2910VGi. The selection of Loop through and Backup Phone Number is only available for 2910VGi model. Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, us[...]

  • Page 133

    Vigor2910 Series User’s Guide 127 D D i i g g i i t t M M a a p p For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface. Enable Check this box to invoke this setti[...]

  • Page 134

    Vigor2910 Series User’s Guide 128 SIP server. OP Number The front number you type here is the first part of the account number that you want to execute special function (according to the chosen mode) by using the prefix num ber. Min Len Set the minimal length of the dial number for appl ying the prefix number settings. Take the above picture (Pre[...]

  • Page 135

    Vigor2910 Series User’s Guide 129 Profile Display the profile name of the account. Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the SIP proxy server. Account Name Display the account name of SIP address before @. Ring Port Specify which port will ring when receiving[...]

  • Page 136

    Vigor2910 Series User’s Guide 130 The system will select a proper way for your VoIP call. SIP Port Set the port number for sending/receiving SIP message for building a session. The default value is 5060. Your peer must set the same value in his/her Registrar. Domain/Realm Set the domain name or IP address of the SIP Registrar server. Proxy Set do[...]

  • Page 137

    Vigor2910 Series User’s Guide 131 Ring Pattern Choose a ring tone type for the VoIP phone call. Below shows successful SIP accounts for your reference. 3 3 . . 1 1 0 0 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone settings for VoIP 1 and VoIP 2 respectively. Phone List Port – There are three phon[...]

  • Page 138

    Vigor2910 Series User’s Guide 132 shown in this field for your reference. You can click the number below the Index field to change it for each phone port. Tone - Display the tone settings that configured in the advanced settings page of Phone Index. Gain - Display the volume gain settings for Mic/Speaker that configured in the advanced settings p[...]

  • Page 139

    Vigor2910 Series User’s Guide 133 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically. T.38 Fax Fun[...]

  • Page 140

    Vigor2910 Series User’s Guide 134 profiles. Refer to section 3.10.1 DialPlan – Phone Book for detailed configuration. Call Waiting Check this box to invoke this function. A notice sound will appear to tell the user new phone call is waiting for your response. Click hook flash to pick up the waiting phone call. Call Transfer Check this box to in[...]

  • Page 141

    Vigor2910 Series User’s Guide 135 To change ISDN call into VoIP call, please dial the character in this field for transferring. The character that you can type can be *, #, and 0~9. To VoIP (for ISDN) - The router is set by using VoIP call. To change VoIP call into ISDN call, please dial the character in this field for transferring. The character[...]

  • Page 142

    Vigor2910 Series User’s Guide 136 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Caller ID Type There are several standards provided here for displaying the caller ID on the panel of the telephone set. Choose the one that is suitable for the phone set according to[...]

  • Page 143

    Vigor2910 Series User’s Guide 137 to the remote end with SIP message. Payload Type (rfc2833) Choose a number from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N ( ( a a v v a a i i l l a a b b l l e e f f o [...]

  • Page 144

    Vigor2910 Series User’s Guide 138 SIP URL – Type in the SIP URL (e.g., aaa@draytel.org or abc@iptel.org) as the site for call forwarded. Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call. During the period, the one who [...]

  • Page 145

    Vigor2910 Series User’s Guide 139 invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile names for the accounts as the default one for this phone setting. Play dial tone only when account registered Check this b[...]

  • Page 146

    Vigor2910 Series User’s Guide 140 User Defined and fill out the corresponding values for dial tone, ringing tone, busy to ne, congestion tone by yourself for VoIP phone. Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10)[...]

  • Page 147

    Vigor2910 Series User’s Guide 141 Payload Type (rfc2833) - Choose a nu mber from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. Disallow VoIP to ISDN Calls with the Following Prefixes Set the prefix of the phone number to forbid the user dialing through VoIP to ISDN. All the phone number with the p[...]

  • Page 148

    Vigor2910 Series User’s Guide 142 2910VGi only. For other V models, only the status for VoIP1 and VoIP2 will be shown in this page. Status It shows the VoIP connection status. IDLE - Indicates that the VoIP function is idle. HANG_UP - Indicates that the connection is not established (busy tone). CONNECTING - Indicates that the user is calling out[...]

  • Page 149

    Vigor2910 Series User’s Guide 143 ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local ISDN network, you should choose the correct country code. Own Number Enter your ISDN number. Every outgoing call will carry the number to the receiver. Blocked MSN Numbers for the router Enter the[...]

  • Page 150

    Vigor2910 Series User’s Guide 144 3 3 . . 1 1 1 1 . . 2 2 D D i i a a l l i i n n g g t t o o a a S S i i n n g g l l e e I I S S P P If you access the Internet via a single ISP, press this link. ISP Name Enter your ISP name. Dial Number Enter the ISDN access number provided by your ISP. Username Enter the username provided by your ISP. Password [...]

  • Page 151

    Vigor2910 Series User’s Guide 145 Yes t o invoke this function and enter the IP address in the field of Fixed IP Address . Fixed IP Address Type the IP address. 3 3 . . 1 1 1 1 . . 3 3 D D i i a a l l i i n n g g t t o o D D u u a a l l I I S S P P s s If you have more than one ISP, press this link to confi gure two ISP dialup profiles. You will [...]

  • Page 152

    Vigor2910 Series User’s Guide 146 As depicted in the above application scenario , the V irtual T A client can make an outgoing call or accept an incoming call to/from a peer F AX machine or ISDN T A, etc. Before describing the configuration of Virtua l TA in the Vigor routers, please heed the following limitations. z The Virtual TA client only su[...]

  • Page 153

    Vigor2910 Series User’s Guide 147 I I n n s s t t a a l l l l a a V V i i r r t t u u a a l l T T A A C C l l i i e e n n t t 1. Insert the CD-ROM bundled with your V igor router . Find VT A Client tool in the Utility menu and click on the Install button. 2. Follow the on-screen instructions of the installer . The last step will ask you to restar[...]

  • Page 154

    Vigor2910 Series User’s Guide 148 Click the V irtual T A Login tab to launch the login box. Enter the Username/Password and then click OK . After a short time, the VT icon text will turn green. M M S S N N C C o o n n f f i i g g u u r r a a t t i i o o n n If you have applied to an MSN number service, th e V irtual T A server can assign which cl[...]

  • Page 155

    Vigor2910 Series User’s Guide 149 3 3 . . 1 1 1 1 . . 5 5 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router ( only for the ISDN m odels) be remotely activated, or be able to dial up to the ISP via the ISDN interface. Vigor router s provide this feature by allowing user to make a phone call to the router and the[...]

  • Page 156

    Vigor2910 Series User’s Guide 150 PPP Authentication It specifies th e PPP authentication method for PPP/MP connections. Normally you can set it to PA P / C H A P for better compatibility . TCP Header Compression VJ Compr ession - It is used for TCP/IP protocol header compression. Normally it is set to None to improve bandwidth utilization. Idle [...]

  • Page 157

    Vigor2910 Series User’s Guide 151 3 3 . . 1 1 2 2 W W i i r r e e l l e e s s s s L L A A N N This function is used for G models only. 3 3 . . 1 1 2 2 . . 1 1 B B a a s s i i c c C C o o n n c c e e p p t t s s Over recent years, the market for wireless co mmunications has enjoyed tremendous growth. Wireless technology now reaches or is capable o[...]

  • Page 158

    Vigor2910 Series User’s Guide 152 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit ke y. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys. WPA(Wi-Fi Protected Access), the most domina ting [...]

  • Page 159

    Vigor2910 Series User’s Guide 153 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each othe r. To elaborate an example for business use, you may set up a wireless LAN for visit[...]

  • Page 160

    Vigor2910 Series User’s Guide 154 3 3 . . 1 1 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Check the box to enable wi[...]

  • Page 161

    Vigor2910 Series User’s Guide 155 selected channel is under serious interference. Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN. Depending on the wireless utility, the user may only see the information except SSID or just cannot see any thing about Vigor wireless[...]

  • Page 162

    Vigor2910 Series User’s Guide 156 3 3 . . 1 1 2 2 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP Only - Accepts only WEP clients [...]

  • Page 163

    Vigor2910 Series User’s Guide 157 either Mixed or WPA2 only in the field below. Since the key will be auto-negotiated during authentication, the field of key setting below will be not available for input. WPA The WPA encrypts each frame transmitted from the radio using the key, which either PSK entered manually in this field below or automaticall[...]

  • Page 164

    Vigor2910 Series User’s Guide 158 3 3 . . 1 1 2 2 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wire less LAN MAC address of client. Only the valid MAC address that has been configured can access[...]

  • Page 165

    Vigor2910 Series User’s Guide 159 OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 3 3 . . 1 1 2 2 . . 5 5 W W D D S S WDS means Wireless Distribution Syste m. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge [...]

  • Page 166

    Vigor2910 Series User’s Guide 160 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Mode Choos[...]

  • Page 167

    Vigor2910 Series User’s Guide 161 Security There are thr ee types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page. If you did not set any key in[...]

  • Page 168

    Vigor2910 Series User’s Guide 162 If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page and click Add . Later, the MAC address of the AP will be added to the page of WDS setting. 3 3 . . 1 1 2 2 . . 7 7 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of [...]

  • Page 169

    Vigor2910 Series User’s Guide 163 3 3 . . 1 1 2 2 . . 8 8 S S t t a a t t i i o o n n R R a a t t e e C C o o n n t t r r o o l l This page allows you to cont rol the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting. The range for the rate is between 100 ~ 30,000 kbps. 3 3 . . 1 1 3[...]

  • Page 170

    Vigor2910 Series User’s Guide 164 Enable Check this box to enable this function (for VLAN Configuration). P1 – P4 Check the box to make the com puter connecting to the port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box. For exam ple, if you check the boxes of[...]

  • Page 171

    Vigor2910 Series User’s Guide 165 The VLAN >> Wireless VALN allows you to configure Wireless VLAN settings through wireless connection to achieve the above intention. Sim ply type Login ID and password with City and 1234 in the boxes of W_VLAN0. And t ype Login ID and password with Home and 7890 in the boxes of W_VLAN1. Users can conf igure[...]

  • Page 172

    Vigor2910 Series User’s Guide 166 Password Type password for different groups of W_VLAN with 1 to 11 characters. Details Click this button to set additional attributes settings for W_VLAN. Activated Date – Use the drop down lists to set the activated date for the wireless VLAN. The wireless VLAN function will be available when the time is arriv[...]

  • Page 173

    Vigor2910 Series User’s Guide 167 4. When the accessing is successful, the following screen will appear. Note: The floating window with connection tim e will be shown on the screen till you logout. 5. You can go to Diagnostics>>Wireless VLAN Online Station for viewing the connection status whenever you want.[...]

  • Page 174

    Vigor2910 Series User’s Guide 168 3 3 . . 1 1 3 3 . . 3 3 V V L L A A N N C C r r o o s s s s S S e e t t u u p p This function allows the router to integr ate VLAN and W_VLAN for managing different computers (notebooks). See the following picture for an exam ple. With VLAN Cross Setup , notebook A/B and PCs on VLAN0 can share resources without d[...]

  • Page 175

    Vigor2910 Series User’s Guide 169 Enable Check this box to invoke VLAN Cross Setup function. VLAN0-3 It represents the groups of virtual LAN connected by Ethernet interface. W_VLAN0-15 It represents the groups of wireless VLAN communicated by wireless interface. 3 3 . . 1 1 3 3 . . 4 4 W W i i r r e e l l e e s s s s R R a a t t e e C C o o n n t[...]

  • Page 176

    Vigor2910 Series User’s Guide 170 3 3 . . 1 1 4 4 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items fo[...]

  • Page 177

    Vigor2910 Series User’s Guide 171 DHCP Server Display the current status of DHCP server of the LAN interface. MAC Address Display the MAC address of the WAN Interface. IP Address Display the IP address of the WAN interface. Default Gateway Display the assigned IP address of the default gateway. DNS Display the assigned IP address of the primary D[...]

  • Page 178

    Vigor2910 Series User’s Guide 172 VigorACS}:8080/ACSServer/services/ACSServlet If the connected CPE does not need to be authenticated please set URL as the following: http://{IP address of VigorACS}:8080/ACSServer/services/UnAuthACSServ let Username/Password Type username and password for ACS Server for authentication. For example, if you want to[...]

  • Page 179

    Vigor2910 Series User’s Guide 173 2. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself. 4. Click Save button, the configuration will download a utomatically to your[...]

  • Page 180

    Vigor2910 Series User’s Guide 174 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click Browse button to choose the correct confi guration file for uploading to the router. 3. Click Restore button[...]

  • Page 181

    Vigor2910 Series User’s Guide 175 Enable syslog message Check the box listed on this web page to send the corresponding message of firewall, VPN, User Access, Call, WAN, Router/DSL information to Syslog. SMTP Server The IP address of the SMTP server. Mail To Assign a mail address for sending mails out. Return-Path Assign a path for receiving the [...]

  • Page 182

    Vigor2910 Series User’s Guide 176 3 3 . . 1 1 4 4 . . 6 6 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as ro[...]

  • Page 183

    Vigor2910 Series User’s Guide 177 3 3 . . 1 1 4 4 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session. The default value is [...]

  • Page 184

    Vigor2910 Series User’s Guide 178 Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a pr oper name. The default setting is public. Notification Host[...]

  • Page 185

    Vigor2910 Series User’s Guide 179 3 3 . . 1 1 4 4 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this ex[...]

  • Page 186

    Vigor2910 Series User’s Guide 180 3 3 . . 1 1 5 5 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 5 5 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial-ou[...]

  • Page 187

    Vigor2910 Series User’s Guide 181 3 3 . . 1 1 5 5 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Refresh Click it to reload the page. 3 3 . . 1 1 5 5 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content [...]

  • Page 188

    Vigor2910 Series User’s Guide 182 3 3 . . 1 1 5 5 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Index It displays the connection ite[...]

  • Page 189

    Vigor2910 Series User’s Guide 183 Peer IP:Port It indicates the destination IP address and port of remote host. Interface It indicates the interface of the WAN connection. Refresh Click it to reload the page. 3 3 . . 1 1 5 5 . . 6 6 W W i i r r e e l l e e s s s s V V L L A A N N O O n n l l i i n n e e S S t t a a t t i i o o n n T T a a b b l l[...]

  • Page 190

    Vigor2910 Series User’s Guide 184 Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh th is page manually. Index Display the number of the data flow. IP Address [...]

  • Page 191

    Vigor2910 Series User’s Guide 185 minutes. The remaining time will be shown on the session column. 3 3 . . 1 1 3 3 . . 8 8 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth/WAN2 Bandwidth or Sessions for viewing different traffic graph. Click Refresh to renew the g[...]

  • Page 192

    Vigor2910 Series User’s Guide 186 3 3 . . 1 1 5 5 . . 9 9 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determ ined by the router automatically. Ping to Use[...]

  • Page 193

    Vigor2910 Series User’s Guide 187 Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Host/IP Address It indicates the IP address of the host. Run Click this button to start route tracing work. Clear Click this link to remove the result o[...]

  • Page 194

    Vigor2910 Series User’s Guide 188 This page is left blank.[...]

  • Page 195

    Vigor2910 Series User’s Guide 189 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d [...]

  • Page 196

    Vigor2910 Series User’s Guide 190 set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5.[...]

  • Page 197

    Vigor2910 Series User’s Guide 191 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s sele cted, [...]

  • Page 198

    Vigor2910 Series User’s Guide 192 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: 1. Go to VPN and Remote Access and select Remote Access Cont rol to enable the necessary VPN[...]

  • Page 199

    Vigor2910 Series User’s Guide 193 parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively w[...]

  • Page 200

    Vigor2910 Series User’s Guide 194 Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service is selected, y ou may further specify the remote peer IP Address, IKE Authentication Method and I[...]

  • Page 201

    Vigor2910 Series User’s Guide 195 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets des tined to the remote network to Router A via the VPN connection.[...]

  • Page 202

    Vigor2910 Series User’s Guide 196 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

  • Page 203

    Vigor2910 Series User’s Guide 197 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security[...]

  • Page 204

    Vigor2910 Series User’s Guide 198 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. Y[...]

  • Page 205

    Vigor2910 Series User’s Guide 199 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router. If a PPP-based service is selected, you should fu rther specify the remote VPN server IP address, Username, Password, and[...]

  • Page 206

    Vigor2910 Series User’s Guide 200 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he woul[...]

  • Page 207

    Vigor2910 Series User’s Guide 201 3. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserve bandwidth for HTTPS. And click Basic button on the right. 4. Click Setup link for W AN1. Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic of V oIP influent other application. 5. If th[...]

  • Page 208

    Vigor2910 Series User’s Guide 202 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/ Subnet Mask is 192.1 68.1.1/255.255.255.0. The built-in DHCP server is enabled so it [...]

  • Page 209

    Vigor2910 Series User’s Guide 203 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

  • Page 210

    Vigor2910 Series User’s Guide 204 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers. John?[...]

  • Page 211

    Vigor2910 Series User’s Guide 205 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: draytel 1 Registe[...]

  • Page 212

    Vigor2910 Series User’s Guide 206 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling. Arn[...]

  • Page 213

    Vigor2910 Series User’s Guide 207 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. 1. Insert CD of the router to your CD ROM. 2. From the we[...]

  • Page 214

    Vigor2910 Series User’s Guide 208 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 12. Type in your router IP, usua[...]

  • Page 215

    Vigor2910 Series User’s Guide 209 14. Click Send . 15. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r[...]

  • Page 216

    Vigor2910 Series User’s Guide 210 1. Go to Certificate Management and choose Local Certificate . 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.[...]

  • Page 217

    Vigor2910 Series User’s Guide 211 4. Connect to CA server via web browser. Follo w the instruction to subm it the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate . Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS [...]

  • Page 218

    Vigor2910 Series User’s Guide 212 Then you have done the request and the ser ver now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate . Now you should get a certificate (.cer file) and save it. 5. Back to Vigor router, go to Local Certificate . Click IMPORT button and browse the file to import the certifica[...]

  • Page 219

    Vigor2910 Series User’s Guide 213 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA cert[...]

  • Page 220

    Vigor2910 Series User’s Guide 214 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refres[...]

  • Page 221

    Vigor2910 Series User’s Guide 215 4 4 . . 9 9 V V P P N N T T R R U U N N K K A A p p p p l l i i c c a a t t i i o o n n You can change, disable or delete VPN TRUNK backup profile(s). Yet, the relational web pages in LAN-to-LAN also will be change d slightly. Please refer to the following expaination. Change the name of VPN TRUNK profile(s) 1. C[...]

  • Page 222

    Vigor2910 Series User’s Guide 216 W W e e b b P P a a g g e e C C h h a a n n g g e e s s f f o o r r V V P P N N T T R R U U N N K K Corresponding web page (LAN-to-LAN) will be changed if VPN TRUNK is enabled. Refer to the following figures. Dial-in call direction and Idle Timeout will be dimmish and cannot be used. All the items in Allowed Dial[...]

  • Page 223

    Vigor2910 Series User’s Guide 217 After adding a new VPN TRUNK profile, it will be listed in Backup Mode drop-down list for you to choose for dialing. Examples for VPN TRUNK Backup Profile Here provides two situations that you can take advantages of VPN TRUNK backup profile mechanism. Example 1: A VPN TRUNK profile with member 1 (IPSec type) and [...]

  • Page 224

    Vigor2910 Series User’s Guide 218 However, if the connection is off-line, Rout er A will use Member 2 VPN tunnel (with L2TP over IPSec) instead to connect Router B right away. Example 2: Subsidiary in Asia can use vigor ro uter as VPN client. Every da y it should transmit ERP, Mail or order inform ation to headquarter in Europe. The Vigor router [...]

  • Page 225

    Vigor2910 Series User’s Guide 219 4 4 . . 1 1 0 0 E E R R D D M M e e c c h h a a n n i i s s m m f f o o r r V V P P N N T T R R U U N N K K To use ERD (Environment Recovery Detection) mechanism for VPN TRUNK, please follow the steps listed below: 1. Click Start >> Run and type Telnet 192.168.1.1 in the Open box as below. Note that the IP [...]

  • Page 226

    Vigor2910 Series User’s Guide 220 Detect VPN connection periodically (by setting value for “second”). If VPN server for Member 1 has completed the network connection, current VPN Tunnel backup connection will be off-line. Request Background: Some of users think it is not really environment recovery detection to borrow VPN tunnels from branch [...]

  • Page 227

    Vigor2910 Series User’s Guide 221 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Che[...]

  • Page 228

    Vigor2910 Series User’s Guide 222 F F o o r r W W i i n n d d o o w w s s  The example is based on Windows XP. As to the examples for other operation systems, please refer to the si milar steps or find support notes in www.draytek.com . 1. Go to Control Panel and then double-click on Network Connection s. 2. Right-click on Local Area Connectio[...]

  • Page 229

    Vigor2910 Series User’s Guide 223 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configure[...]

  • Page 230

    Vigor2910 Series User’s Guide 224 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For so me reason, you might need to use “ping” command to check the link status of the router. The most impor[...]

  • Page 231

    Vigor2910 Series User’s Guide 225[...]

  • Page 232

    Vigor2910 Series User’s Guide 226 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly. F F o o r r P P P P P P o o E E U U s s e e r r s s 1. Check if the Enabl[...]

  • Page 233

    Vigor2910 Series User’s Guide 227 5 5 . . 5 5 P P r r o o b b l l e e m m s s f f o o r r 3 3 G G N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n When you have trouble in using 3G network transm ission, please check the following: C C h h e e c c k k i i f f U U S S B B L L E E D D l l i i g g h h t t s s o o n n o o r r o o f[...]

  • Page 234

    Vigor2910 Series User’s Guide 228 T T r r a a n n s s m m i i s s s s i i o o n n R R a a t t e e i i s s n n o o t t f f a a s s t t e e n n o o u u g g h h Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor2910. In addition, please refer to the manual of 3G USB Modem for LED S[...]

  • Page 235

    Vigor2910 Series User’s Guide 229 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly , please re lease the button. Then, the router will restar t with the default configuration. After restore th[...]