Draytek Vigor2820VSn manual

Vigor2820 Series User’s Guide i[...]

Vigor2820 Series User’s Guide ii[...]

Vigor2820 Series User’s Guide iii Vigor2820 Series ADSL2/2+ Security Firewall User’s Guide Version: 3.0 Date: 30/07/2009[...]

Vigor2820 Series User’s Guide iv Copyright Information Copyright Declarations Copyright 2009 All rights reserved. This pub lication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stor ed in a retrieval system, or translated into any language withou t written permission from the copyright [...]

Vigor2820 Series User’s Guide v European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town ship, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor2820 Ser ies Router DrayTek Corp. declares that Vigor2820 Series of ro uters are in compliance with the following essential requirements and other [...]

Vigor2820 Series User’s Guide vi[...]

Vigor2820 Series User’s Guide vii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Buttons Explanation ................................................................................. 1 1.[...]

Vigor2820 Series User’s Guide viii 3.3.3 Open Ports ...................................................................................................................... 74 3.4 Fire wall .................................................................................................................................. 76 3.4.1 Basics for Fire wall[...]

Vigor2820 Series User’s Guide ix 3.12.1 Basic Concept ............................................................................................................. 183 3.12.2 General Settings ........................................................................................................ . 184 3.12.3 Dial to Single/Dual ISPs..............[...]

Vigor2820 Series User’s Guide x 4.7 Request a certificate from a CA server on Windows CA Server ......................................... 253 4.8 Request a CA Certificate and Set as T rusted on Wind ows CA Se rver ............................... 257 5 T r ouble Shoot ing ............................................................................[...]

Vigor2820 Series User’s Guide 1 1 P P r r e e f f a a c c e e Vigor2820 series is an ADSL and broadband router with WAN interface. It provides policy-based load-balance, fail-over and BOD (Bandwidth on Demand), also it integrates IP layer QoS, NAT session/bandwidth managem ent to help users control works well with large bandwidth. By adopting har[...]

Vigor2820 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. The displays of LED indicators and connectors for the routers are different slightly. The following[...]

Vigor2820 Series User’s Guide 3 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking Th e data is transmitting. CSM On The profi le of CSM (C ontent Se[...]

Vigor2820 Series User’s Guide 4 Interface Description Factory Reset Restore the def ault settings. Us age: T urn on the router (ACT LED is blinking). Press the hole and keep fo r more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, release the button. Then the router will restart with the fa ctory default configurati[...]

Vigor2820 Series User’s Guide 5 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking Th e data is transmitting. CSM On The profi le of CSM (C onten[...]

Vigor2820 Series User’s Guide 6 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection th rough WPS. Press "Wireless LAN ON/OFF/WPS" button once to enab le (WLAN LED on) or disa ble (WLAN LED off) wireless c onnection. Factory Re[...]

Vigor2820 Series User’s Guide 7 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking Th e data is transmitting. CSM On The profi le of CSM (C onten[...]

Vigor2820 Series User’s Guide 8 Interface Description Factory Reset Restore the def ault settings. Us age: T urn on the router (ACT LED is blinking). Press the hole and keep fo r more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, release the button. Then the router will restart with the fa ctory default configurati[...]

Vigor2820 Series User’s Guide 9 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking Th e data is transmitting. CSM On The profi le of CSM (C o[...]

Vigor2820 Series User’s Guide 10 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection th rough WPS. Press "Wireless LAN ON/OFF/WPS" button once to enab le (WLAN LED on) or disa ble (WLAN LED off) wireless c onnection. Factory R[...]

Vigor2820 Series User’s Guide 11 1 1 . . 2 2 . . 5 5 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V S S LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking Th e data is transmitting. CSM On The profi le of CSM (C [...]

Vigor2820 Series User’s Guide 12 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking Th e data is transmitting. On The port is conn ected with 1000Mbps. LAN 1(Giga) Right LED (Green) Off The port is di sconnected wit h 10/100Mb ps. On The port is connected. Off The port is disconnected. Left LED (Green) Blinking Th e[...]

Vigor2820 Series User’s Guide 13 1 1 . . 2 2 . . 6 6 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V S S n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active. USB Blinking Th e data is transmitting. CSM On The profi le of CSM[...]

Vigor2820 Series User’s Guide 14 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking Th e data is transmitting. On The port is conn ected with 1000Mbps. LAN 1(Giga) Right LED (Green) Off The port is di sconnected wit h 10/100Mb ps. On The port is connected. Off The port is disconnected. Left LED (Green) Blinking Th e[...]

Vigor2820 Series User’s Guide 15 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the ADSL interface to the external ADSL splitter with an ADSL line cable for all models. For Vigor2820Vn/VS/VSn, also connect L[...]

Vigor2820 Series User’s Guide 16 Caution : Each of the Phone ports can be connected to an analog phone onl y. Do not connect the phone ports to the telephone wall jack. Such connection might damage your router. 1 1 . . 4 4 I I S S D D N N P P h h o o n n e e A A d d a a p p t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n Such informat[...]

Vigor2820 Series User’s Guide 17 1 1 . . 5 5 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE, please visit w[...]

Vigor2820 Series User’s Guide 18 3. Open File->Add a New Computer . A welcome dialog will appear. Please click Next . 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port . Click Next .[...]

Vigor2820 Series User’s Guide 19 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port nam e. Then, click Next . 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish .[...]

Vigor2820 Series User’s Guide 20 9. Now, your system will ask you to choose right name of the printer that you installed onto t he router. Such step can make correct driver loaded ont o your PC. When you finish the selection, click Next . 10. For the final stage, you need to go back to Control Panel-> Printers and edit the property of the new [...]

Vigor2820 Series User’s Guide 21 Note 1: Some printers with the fax/scanning or other additional fun ctions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ ; find out the link of Printer Server and click it; then click the What types of[...]

Vigor2820 Series User’s Guide 22 This page is left blank.[...]

Vigor2820 Series User’s Guide 23 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password for an administrator and h[...]

Vigor2820 Series User’s Guide 24 Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the default is blank) on the field of Old Password . Type New Password . Then click OK to continue. 6. Now, the password has been change[...]

Vigor2820 Series User’s Guide 25 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After ty ping the passwor[...]

Vigor2820 Series User’s Guide 26 In the Quick Start Wizard , you can configure the router to access the Internet with different protocol/modes such as PPPoE/PPPoA , 1483 Bridged IP or 1483 Routed IP . The router supports the DSL WAN interface for Internet access. 2 2 . . 2 2 . . 1 1 P P P P P P o o E E / / P P P P P P o o A A PPPoE stands for Poi[...]

Vigor2820 Series User’s Guide 27 If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown: User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Click Next for viewing summary of such c[...]

Vigor2820 Series User’s Guide 28 2 2 . . 2 2 . . 2 2 1 1 4 4 8 8 3 3 B B r r i i d d g g e e d d I I P P Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the syste[...]

Vigor2820 Series User’s Guide 29 2 2 . . 2 2 . . 3 3 1 1 4 4 8 8 3 3 R R o o u u t t e e d d I I P P Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! wil[...]

Vigor2820 Series User’s Guide 30 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page. If you select PPPoE/PPPoA as the protocol, you will find out a link of Dial PPPoE or Drop PPPoE in the Online Status web page[...]

Vigor2820 Series User’s Guide 31 Online status for Static IP (for WAN1) Online status for DHCP (WAN1)[...]

Vigor2820 Series User’s Guide 32 Online status for ISDN enabled Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Display s the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN i[...]

Vigor2820 Series User’s Guide 33 RX Rate Displays the speed of received octets at the ISDN interface. Up Time Displays the total uptime of the interface. AOC Displays the charge information of the interface. Note: The words in green mean that the WAN connection of that interface (WAN1/WAN2) is ready for accessing Internet; the words in red mean t[...]

Vigor2820 Series User’s Guide 34 This page is left blank.[...]

Vigor2820 Series User’s Guide 35 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed infor[...]

Vigor2820 Series User’s Guide 36 3 3 . . 1 1 . . 2 2 N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n b b y y 3 3 G G U U S S B B M M o o d d e e m m For 3G mobile communication through Access Point is popular more and more, Vigor2820 adds the function of 3G network connection fo r such purpose. By connecting 3G USB Modem to th[...]

Vigor2820 Series User’s Guide 37 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface. Display Name Type the description for the WAN1/WAN2 interface. Physical Mode For WAN1, the physical connection is done through ADSL port; yet the physical connection for WAN2 is done through a[...]

Vigor2820 Series User’s Guide 38 determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the best load balance. Line Speed If your choose According to Line Speed as the Load Balance Mod[...]

Vigor2820 Series User’s Guide 39 3 3 . . 1 1 . . 4 4 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly. Ind[...]

Vigor2820 Series User’s Guide 40 Enable/Disable Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your ISP. Multi-PVC c[...]

Vigor2820 Series User’s Guide 41 PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server. Thus,[...]

Vigor2820 Series User’s Guide 42 In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function. WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than[...]

Vigor2820 Series User’s Guide 43 DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your ISP. Multi-PVC channel - The selections displayed here are determined by the page of Internet Access – Multi PVCs . Select M-PVCs Channel means no selection will be chosen. Encapsulating Type - [...]

Vigor2820 Series User’s Guide 44 a Single ISP to create the backup profile. None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. Always On - If the broadband connection is no longer available, the backup line will be activated automatically a[...]

Vigor2820 Series User’s Guide 45 Then click OK to exit the dialog. IP Address – Type in the private IP address. Subnet Mask – Type in the subnet mask. Gateway IP Address – Type in gateway IP address. Default MAC Address Type in MAC address for the router. You can use Default MAC Address or spec ify another MAC address for your necessity. MA[...]

Vigor2820 Series User’s Guide 46 Enable/Disable Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. ISP Access Setup Enter your allocated username, password and authentication parameters according to the inform ation provided by your I[...]

Vigor2820 Series User’s Guide 47 Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. MTU Mean maximum transmission unit of one packet. The default value is 1442. PPP/MP Setup PPP Authentication [...]

Vigor2820 Series User’s Guide 48 S S t t a a t t i i c c o o r r D D y y n n a a m m i i c c I I P P f f o o r r W W A A N N 2 2 For static IP mode, you usually receive a fixed public IP address or a public subnet, nam ely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer[...]

Vigor2820 Series User’s Guide 49 Detection Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. Keep WAN Con[...]

Vigor2820 Series User’s Guide 50 if you want to use Static IP mode. IP Address : Type the IP address. Subnet Mask : Type the subnet mask. Gateway IP Address : Type the gateway IP address. Default MAC Address : Click this radio button to use default MAC address for the router. Specify a MAC Address : Some Cable service providers specify a specific[...]

Vigor2820 Series User’s Guide 51 ISDN Dial Backup Setup This setting is available for the routers supporting ISDN function only. Before utilizing the ISDN dial backup feature, you must create a dial backup profile first. Please click ISDN > Dialing to a Single ISP to create the backup profile. None - Disable the backup function. Packet Trigger[...]

Vigor2820 Series User’s Guide 52 address in the box of Fixed IP Address . Fixed IP Address - Type a fixed IP address. WAN IP Network Settings Obtain an IP address automatically – Click this button to obtain the IP address automatically. Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. S[...]

Vigor2820 Series User’s Guide 53 3 3 . . 1 1 . . 5 5 M M u u l l t t i i - - P P V V C C s s This router allows you to create multi-PVCs for different data transferring for using. Simply go to Internet Access and select Multi-PVC Setup page. G G e e n n e e r r a a l l The system allows you to set up to eight channels which are ready for choosing[...]

Vigor2820 Series User’s Guide 54 Encapsulation Choose a proper type for this channel. The types will be different according to the protocol setting that you choose. WAN link for Channel 3, 4, 5 are provided for router-borne applic ation such as TR069 and VoIP. The settings must be applied and obtained from your ISP. For your special request, plea[...]

Vigor2820 Series User’s Guide 55 A A T T M M Q Q o o S S Such configuration is applied to upstream packets. Such inform ation will be provided by ISP. Please contact with your ISP for detailed information. QoS Type Select a proper QoS type for the channel according to the information that your ISP provides. PCR It represents Peak Cell R ate. The [...]

Vigor2820 Series User’s Guide 56 P P o o r r t t - - b b a a s s e e d d B B r r i i d d g g e e General page lets you set the first PVC. As to set the second PVC line, please click the Port-based Bridge tab to open Bridge configuration page. Enable Check this box to enable that channel. Only channel 3 to 8 can be set in this page, for channel 1 [...]

Vigor2820 Series User’s Guide 57 3 3 . . 1 1 . . 6 6 L L o o a a d d - - B B a a l l a a n n c c e e P P o o l l i i c c y y This router supports the function of load balancing. It can assign traffic with protocol type, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN1 or WAN2 interface. The user can assign t[...]

Vigor2820 Series User’s Guide 58 Dest Port Start Display s the IP address for the start of the destination port. Dest Port End Displays the IP address for the end of the destination port. Move UP/Move Down Use Up or Down link to m ove the order of the policy. Click Index 1 to access into the following page for configuring load-balance policy. Ena[...]

Vigor2820 Series User’s Guide 59 Dest Port End Type the destination port end for the destination IP. If this field is blank, it means that all the destination ports will be passed through the WAN interface. 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is rel[...]

Vigor2820 Series User’s Guide 60 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V i gor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing. This allows users to change the information of the ro[...]

Vigor2820 Series User’s Guide 61 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in pri vate IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask T[...]

Vigor2820 Series User’s Guide 62 server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.135.240.1, the starting IP address must be 220.135.240.2 or greater , b ut smaller than 220.135.240.254. IP Pool Cou nts: Enter the number of IP addresses in the pool. The maximum is 10. For example, if you t ype 3 and the [...]

Vigor2820 Series User’s Guide 63 the DHCP server you are going to use so the Relay Ag ent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Internet host must have a unique IP address, also they may have a human-friendly, easy to remember name such as www.y ahoo.com. The DN[...]

Vigor2820 Series User’s Guide 64 Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i c c R R o o u u t t e e s s t t o o P P r r i i v v a a t t e e a a n n d d P P u u b b l l i i c c N N e e t t w w o o r r k k s s Here is an example of setting Stat[...]

Vigor2820 Series User’s Guide 65 the router , and continuously exchange o f IP routing information with dif ferent subnets. 2. Click the LAN - S tatic Route and click on the Index Num ber 1. Check the Enable box. Please add a static route as shown below , which regulates all packets destined to 192.168.10.0 will be forwarded to 192.168.1.2. Click[...]

Vigor2820 Series User’s Guide 66 3 3 . . 2 2 . . 4 4 V V L L A A N N Virtual LAN function provides you a very convenient way to manage hosts by g rouping them based on the physical port. You can also manage the in/out rate of each port. Go to LAN page and select VLAN . The following page will appear. Click Enable to invoke VL AN function. To add [...]

Vigor2820 Series User’s Guide 67 T o remove VLAN, uncheck the needed box and click OK to save the results. 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthening co ntrol in network. When this function is enabled, all the assigned IP and MAC address bindi[...]

Vigor2820 Series User’s Guide 68 Strict Bind Click this radio butt on to block the connection of the IP/MAC which is not listed in IP Bind List. ARP Table This table is the LAN ARP table of this router. The information for IP and MAC will be displayed in this field. Each pair of IP and MAC address listed in ARP table can be selected and added to [...]

Vigor2820 Series User’s Guide 69 On NAT page, you will see the private IP address defined in RFC-1918. Usually we use the 192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port m[...]

Vigor2820 Series User’s Guide 70 Press any number under Index to access into next page for configuring port redirection. Enable Check this box to enable such port redirection setting. Mode Two optio ns (Single and Range) are provided here for you to cho ose. To set a range for the specific service, select Range . In Range mode, if the public port[...]

Vigor2820 Series User’s Guide 71 Private IP Specify the private IP address of the internal host providing the service. If you choose Range as the port redirection mode, you will see two boxes on this field. Type a complete IP address in the first box (as the starting point) and the fourth digits i n the second box (as the end point). Private Port[...]

Vigor2820 Series User’s Guide 72 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias for PPPoE/PPPoA or MPoA mode , you will find them in Aux. WAN IP for your[...]

Vigor2820 Series User’s Guide 73 Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this button and then a window will autom atically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network. Select one private IP address in the list t[...]

Vigor2820 Series User’s Guide 74 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application i[...]

Vigor2820 Series User’s Guide 75 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that will be used for this entry. Local Computer Enter the private IP address of the local host or click Choose PC to select one. Choose PC Click this button and, s[...]

Vigor2820 Series User’s Guide 76 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor[...]

Vigor2820 Series User’s Guide 77 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a packet based on the information in its header, stateful inspect[...]

Vigor2820 Series User’s Guide 78 3 3 . . 4 4 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p General Setup allows you to adjust setti ngs of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter . Under some circumstance, your filter set can be linked to work in a serial manner. So here you assign the[...]

Vigor2820 Series User’s Guide 79 the Log box. It will be sent to Syslog server . Please refer to section 3.14.5 Syslog/Mail Alert for more detailed information. W e b Content Filter Select one of the W eb Content Filter Profile settings (created in CSM>> W e b Content Filter Profile ) for applying with this router . Please set at least one [...]

Vigor2820 Series User’s Guide 80 (0~65535). The m ore the value is, the better the performance will be. However , if the network is not stable, sm all value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources. However , Queue timeout is configured for TCP protoc ol onl y; session tim[...]

Vigor2820 Series User’s Guide 81 Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the butt on will open Edit Filter Rule web page. For the detailed information, refer to the following page. Active Enable or disable the filter rule. Comment Enter filter set comments/description. Maximum length is 23–character long. Move[...]

Vigor2820 Series User’s Guide 82 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type. From the IP Group drop down list[...]

Vigor2820 Series User’s Guide 83 use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port - (=) – when the first and last value are the same, it indicates one port; when the first and last values are [...]

Vigor2820 Series User’s Guide 84 will be sent to Syslog server . Please refer to section 3.14.5 Syslog/Mail Alert for more detailed information. W e b Content Filter Select one of the W eb Content Filter profile settings (created in CSM>> W e b Content Filter ) for applying with this router . Please set at least one profile for anti-virus i[...]

Vigor2820 Series User’s Guide 85 Window size – It determines the size of TCP protocol (0~65535). The m ore the value is, the better the performance will be. However , if the network is not stable, sm all value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources. However , Queue tim[...]

Vigor2820 Series User’s Guide 86 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defense C[...]

Vigor2820 Series User’s Guide 87 detecting this malicious exploration behavior by monitoring the port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the bo x to activate the Block IP options function. The Vigor router will ignore [...]

Vigor2820 Series User’s Guide 88 indicate the protocol type running over the upper layer. However, the protocol types greater than 100 are reserved and undefined at this time. Therefore, the router should have ability to detect and reject this kind of packets. Warning Messages We provide Syslog function for user to retrieve message from Vigor rou[...]

Vigor2820 Series User’s Guide 89 3 3 . . 5 5 O O b b j j e e c c t t s s S S e e t t t t i i n n g g For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/group[...]

Vigor2820 Series User’s Guide 90 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address. If you choose LAN as the Interface here, and choose LAN as the di[...]

Vigor2820 Series User’s Guide 91 3 3 . . 5 5 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail.[...]

Vigor2820 Series User’s Guide 92 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or A ny to display all the available IP objects with the specified interface. Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box. Selected IP Objects Cl[...]

Vigor2820 Series User’s Guide 93 Name Type a name for this profile. Protocol Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number. (=) – when the firs[...]

Vigor2820 Series User’s Guide 94 3 3 . . 5 5 . . 4 4 S S e e r r v v i i c c e e T T y y p p e e G G r r o o u u p p This page allows you to bind several service types into one group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Name Type a name for this profile. Available Service Type Obj[...]

Vigor2820 Series User’s Guide 95 3 3 . . 5 5 . . 5 5 K K e e y y w w o o r r d d O O b b j j e e c c t t You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Set to Factory Default Clear all profiles. Click the number under Index column for setting in detail. Name Type a name for[...]

Vigor2820 Series User’s Guide 96 3 3 . . 5 5 . . 6 6 K K e e y y w w o o r r d d G G r r o o u u p p This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL Web Content Filter Profile . Set to Factory Default Clear all profiles. Click the number under [...]

Vigor2820 Series User’s Guide 97 3 3 . . 5 5 . . 7 7 F F i i l l e e E E x x t t e e n n s s i i o o n n O O b b j j e e c c t t This page allows you to set eight profiles which will be applied in CSM>>URL Content Filter . All the files with the extension names specified in these profiles will be processed according to the chosen action. Pr[...]

Vigor2820 Series User’s Guide 98 Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. 3 3 . . 5 5 . . 8 8 I I M M O O b b j j e e c c t t This page allows you to set 32 profiles for Instant Messenger. These profiles will be applied in CSM>>IM/P2P[...]

Vigor2820 Series User’s Guide 99 Profile Name Type a name for this profile. Type a name for such profile and check all the ite ms that not allowed to be used in the host. Finally, click OK to save this profile.[...]

Vigor2820 Series User’s Guide 100 3 3 . . 5 5 . . 9 9 P P 2 2 P P O O b b j j e e c c t t This page allows you to set 32 profiles for peer-to-peer application. These profiles will be applied in CSM>>IM/P2P Filter Profile for filtering. Set to Factory Default Clear all profiles. Click the number under Profile column for configuration in deta[...]

Vigor2820 Series User’s Guide 101 Profile Name Type a name for this profile. Type a name for such profile and check all the prot ocols that not allowed to be used in t he host. Finally, click OK to save this profile. 3 3 . . 5 5 . . 1 1 0 0 P P r r o o t t o o c c o o l l O O b b j j e e c c t t This page allows you to set 32 profiles for applica[...]

Vigor2820 Series User’s Guide 102 Type a name for such profile and check all the prot ocols that not allowed to be used in t he host. Finally, click OK to save this profile. 3 3 . . 5 5 . . 1 1 1 1 M M i i s s c c O O b b j j e e c c t t This page allows you to set 32 profiles for miscellaneous applications. These profiles will be applied in CSM&[...]

Vigor2820 Series User’s Guide 103 Profile Name Type a name for this profile. Type a name for such profile and check all the prot ocols that not allowed to be used in t he host. Finally, click OK to save this profile. 3 3 . . 6 6 C C S S M M CSM is an abbreviation of Content Security Management which is used to control IM/P2P usage, filter the web[...]

Vigor2820 Series User’s Guide 104 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web feature where malicious code may conceal. Once a user type in[...]

Vigor2820 Series User’s Guide 105 3 3 . . 6 6 . . 1 1 I I M M / / P P 2 2 P P F F i i l l t t e e r r P P r r o o f f i i l l e e You can define policy profiles for different policy of IM (Instant Messenger)/P2P (Peer to Peer) application. Such profile will be used in Firewall>>General Setup and Firewall>>Filter Setup pages. Set to Fa[...]

Vigor2820 Series User’s Guide 106 3 3 . . 6 6 . . 2 2 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web feature where malicious code may conceal.[...]

Vigor2820 Series User’s Guide 107 Profile Name Type the name for such profile. Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages that match with the conditions specified in URL Access Control and Web Feature below passing through. When you choose this setting, both configuration set[...]

Vigor2820 Series User’s Guide 108 All – All the actions (Pass and Block) will be recorded in Syslog. URL Access Control Enable URL Access Control - Check the box to activate URL Access Control. Note that the priority for URL A ccess Control is higher than Restrict Web Feature . If the web content match the setting set in URL Access Control, the[...]

Vigor2820 Series User’s Guide 109 more efficiently the Vigor router perform. Web Feature Enable Restrict Web Feature - Check this box to make the keyword being blocked or passed. Action - This setting is available only when Either : URL Access Control First or Either : Web Feature Firs is selected. Pass allows accessing into the corresponding web[...]

Vigor2820 Series User’s Guide 110 3 3 . . 6 6 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible parent or employer, you should protect those in your trust against the hazards. With Web filtering servic[...]

Vigor2820 Series User’s Guide 111 Black/White List Enable – Check this box t o enable the filtering mechanism with the condition of black/white list. Click Edit to open the keyword object /group selection window and choose the one you want to use. Then, choose the action for such selection. Action , Pass – A webpage which content matches with[...]

Vigor2820 Series User’s Guide 112 All – All the actions (Pass and Block) will be recorded in Syslog. For this section, please refer to Web Content Filter user’s guide for more information. 3 3 . . 7 7 B B a a n n d d w w i i d d t t h h M M a a n n a a g g e e m m e e n n t t Below shows the menu items for Bandwidth Management. 3 3 . . 7 7 . [...]

Vigor2820 Series User’s Guide 113 Default session limit Defines the default session number used for each computer in LAN. Limitation List Displays a list of specific limitations that you set on this web page. Start IP Defines the start IP address for limit session. End IP Defines the end IP address for limit session. Maximum Sessions Defines the [...]

Vigor2820 Series User’s Guide 114 To activate the function of limit bandwidth, simply click Enable and set the default upstream and downstream limit. Enable Click this but ton to activate the function of lim it bandwidth. Apply to 2 nd Subnet – Check this box to apply the bandwidth limit to the second subnet specified in LAN>>General Setu[...]

Vigor2820 Series User’s Guide 115 3 3 . . 7 7 . . 3 3 Q Q u u a a l l i i t t y y o o f f S S e e r r v v i i c c e e Deploying QoS (Quality of Service) management to guarantee that all applications receive the service levels required and sufficient bandwidth to meet performance expectations is indeed one important aspect of modern enterprise net[...]

Vigor2820 Series User’s Guide 116 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s eff[...]

Vigor2820 Series User’s Guide 117 OUT- apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK , then click Setup link again. You will see the Online Statistics link appearing on this page. WAN Inbound Bandwidth It allows y ou to set the connecting rate of data input for WAN. For example, if [...]

Vigor2820 Series User’s Guide 118 After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. For adding a new rule, click Add to open the following page. ACT Check this box to invoke these settings. Local Address Click the Edit button [...]

Vigor2820 Series User’s Guide 119 Edit It allows you to edit source address information. Address Type – Determine the address type for the source address. For Single Address , you have to fill in Start IP address. For Range Address , you have to fill in Start IP address and End IP address. For Subnet Address , you have to fill in Start IP addre[...]

Vigor2820 Series User’s Guide 120 After you click the Edit link, you will see the following page. For adding a new service type, click Add to open the following pag e. Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range as the Type . [...]

Vigor2820 Series User’s Guide 121 3 3 . . 8 8 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 8 8 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address assigned to [...]

Vigor2820 Series User’s Guide 122 Index Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN Interface Display current WAN interface used for accessing Internet. Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. Vie[...]

Vigor2820 Series User’s Guide 123 Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup , and push Clear All button to disable the function and clear all accounts from the router. Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push [...]

Vigor2820 Series User’s Guide 124 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule. Action Specify which action Call Schedule should apply durin[...]

Vigor2820 Series User’s Guide 125 2. Configure the PPPoE always on from 9:00 to 18:00 f or whole week. 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week. 4. Assign these two profiles to the PPPoE Internet access profile. Now , the PPPoE Internet connection will follow the schedule order to perform For ce On or Force Down act[...]

Vigor2820 Series User’s Guide 126 3 3 . . 8 8 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configuration which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT routers[...]

Vigor2820 Series User’s Guide 127 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your P C may cause the UPnP function not working properly. This is because these applicati ons will block the accessing ability of some network ports. Security Considerations Activating[...]

Vigor2820 Series User’s Guide 128 3 3 . . 8 8 . . 5 5 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol . It is a communication protocol which is mainly used for managing the membership of Internet Protocol m ulticast groups. For invoking IGM P Snooping function, you have to check the Enable I GMP Proxy box first for [...]

Vigor2820 Series User’s Guide 129 3 3 . . 8 8 . . 6 6 W W a a k k e e o o n n L L A A N N A PC client on LAN can be woken up by the router it connects. When a user wants to wake up a specified PC through the router, he/she must type correct MAC address of the specified PC on this web page of Wake on LAN of this router. In addition, such PC must h[...]

Vigor2820 Series User’s Guide 130 3 3 . . 9 9 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Internet. In short, by VPN technolog y, you can send data between two computers across a shared[...]

Vigor2820 Series User’s Guide 131 3 3 . . 9 9 . . 2 2 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP or CHAP[...]

Vigor2820 Series User’s Guide 132 Assigned IP Address Enter a specif ic IP address for the dial-in PPP connection. You should choose an IP address from the local private network. 3 3 . . 9 9 . . 3 3 I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration. There are two[...]

Vigor2820 Series User’s Guide 133 Confirm Pre-Shared Key- Retype the characters to confirm the pre-shared key. IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and a[...]

Vigor2820 Series User’s Guide 134 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can be IP Address, Domain, or E-mail Address . The box under th[...]

Vigor2820 Series User’s Guide 135 3 3 . . 9 9 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection. You may set param eters including specified connection peer ID, co[...]

Vigor2820 Series User’s Guide 136 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the rem ote ISDN dial-in connection. You can further set up Callback function [...]

Vigor2820 Series User’s Guide 137 aggressive mode). Uncheck the checkbox- This means the connection type you select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. Password This field is applicable w[...]

Vigor2820 Series User’s Guide 138 3 3 . . 9 9 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including specified c onnection direction (dial-in or dial-out), connection peer ID, connection type (VPN connection - including P PTP, IPSec Tunnel,[...]

Vigor2820 Series User’s Guide 139 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. Netbios Naming Packet Pass – click it to have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connecting. Block – When there is confli[...]

Vigor2820 Series User’s Guide 140 WAN1 Only - While connecting, the router will use WAN1 as the only channel for VPN connection. WAN2 First - While connecting, the router will use WAN2 as the first channel for VPN connection. If WAN2 fails, the router will use another WAN interface instead. WAN2 Only - While connecting, the router will use WAN2 a[...]

Vigor2820 Series User’s Guide 141 IPSec Tunnel Build an IPSec VPN connection to t he server through Internet. L2TP with … Build a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: None: Do not apply the IPSec policy. Accordingly, the VPN connection employed the L2TP without IPSec policy[...]

Vigor2820 Series User’s Guide 142 IKE phase 1 mode - Select from Main mode and Aggressive mode. The ultimate outcome is to exchange security proposals to create a protected secure channel. Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the IPSec session. However, the Aggressive mode is fa[...]

Vigor2820 Series User’s Guide 143 the remote router. This feature is useful for s model only. Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below. This feature is useful for s model only. In addition, yo[...]

Vigor2820 Series User’s Guide 144 becomes one pure L2TP connection. Must - Specify the IPSec policy to be definitely applied on the L2TP connection. Specify CLID or Remote VPN Gateway You can specify the IP address of the remote dial-in user or peer ID (should be the same with the ID setting in dial-in type) by checking the box. Enter Peer ISDN n[...]

Vigor2820 Series User’s Guide 145 exhausted, the function will be disabled automatically. Callback Budget (Unit: minutes)- Specify the time budget for the dial-in user. The budget will be decreased automatically per callback connection. The default value 0 means no limitation of callback period. My WAN IP This field is only applicable when you se[...]

Vigor2820 Series User’s Guide 146 3 3 . . 9 9 . . 7 7 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You m ay also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Dial Click [...]

Vigor2820 Series User’s Guide 147 3 3 . . 1 1 0 0 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc., and the digital signature of th[...]

Vigor2820 Series User’s Guide 148 Type in all the information that the window request. Then click Generate again. Import Click this button to import a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After c[...]

Vigor2820 Series User’s Guide 149 3 3 . . 1 1 0 0 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. [...]

Vigor2820 Series User’s Guide 150 3 3 . . 1 1 0 0 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please typ[...]

Vigor2820 Series User’s Guide 151 registration messages to validate. Then, both parties’ SIP proxies will forward the sequence of messages to caller to establish the session . If you both register to the same SIP Registrar, then it will be illustrated as below: The major benefit of this mode is that you don ’t have to memorize your friend’s[...]

Vigor2820 Series User’s Guide 152 3 3 . . 1 1 1 1 . . 1 1 D D i i a a l l P P l l a a n n This page allows you to set phone book and digit map for the VoIP function. Click the Phone Book and Digit Map links on the page to access into next pages for dialplan settings. P P h h o o n n e e B B o o o o k k In this section, you can set your VoIP conta[...]

Vigor2820 Series User’s Guide 153 Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots of[...]

Vigor2820 Series User’s Guide 154 Loop through For the model of Vigor 2820Vn, the selection should be as the following: Backup Phone Number When the VoIP phone is obstructs or the Internet breaks down for some reasons, the backup phone will be dialed out to replace the VoIP phone number. At this time, the phone call will be changed from VoIP phon[...]

Vigor2820 Series User’s Guide 155 D D i i g g i i t t M M a a p p For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface. Enable Check this box to invoke this setti[...]

Vigor2820 Series User’s Guide 156 specific VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” will be changed to “88631111111” and sent to SIP server. OP Number The front number you type here is the first part of the [...]

Vigor2820 Series User’s Guide 157 Enable Click this to enable this entry. Call Direction Determine the direction for the phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/URL or number. Specific URI/URL or Specific Number This field w[...]

Vigor2820 Series User’s Guide 158 For Block Unknown Domain – this function can block incomi ng calls (through Phone port) from unrecognized domain that is not specified in SIP accounts. Such control also can be done based on preconfigured schedules. For Block IP Address – this function can block incoming calls (through Phone port) com ing fro[...]

Vigor2820 Series User’s Guide 159 R R e e g g i i o o n n a a l l This page allows you to process incoming or outgoing phone calls by regional. Default values (common used in most areas) will be shown on this web page. You can change the number based on the region that the router is placed. Last Call Return [Miss] Someti mes, people might miss so[...]

Vigor2820 Series User’s Guide 160 Hide caller ID [Act] Dial the number typed in this field to make your phone number (ID) not displayed on the display panel of remote end. Hide caller ID [Deact] Dial the number typed in this field to release this function. Call Waiting [Act] Dial the number typed in this field to make all the incoming calls waiti[...]

Vigor2820 Series User’s Guide 161 3 3 . . 1 1 1 1 . . 2 2 S S I I P P A A c c c c o o u u n n t t s s In this section, you set up your own SIP setti ngs. When you apply for an account, your SIP service provider will give you an Account Name or user name, SIP Registrar, Proxy, and Domain name . (The last three might be the same in some case). Then[...]

Vigor2820 Series User’s Guide 162 For Vigor2820VS/Vigor2820VSn models, you will see the following page: Index Click this link to access into next page for setting SIP account. Profile Display the profile name of the account. Domain/Realm Display the domain nam e or IP address of the SIP registrar server. Proxy Display the domain nam e or IP addre[...]

Vigor2820 Series User’s Guide 163 Account Name Display the account name of SIP address before @. Ring Port Specify which port will ring when receiving a phone call. Set Phone, ISDN1-S0 or ISDN-TE as the default ring port for the SIP account. If you choose Phone or ISDN1-S0, the ISDN2-TE selection will be dimmed, vice versa. There are ten in terna[...]

Vigor2820 Series User’s Guide 164 The system will select a proper way for your VoIP call. SIP Port Set the port num ber for sending/receiving SIP message for building a session. The default value is 5060. Your peer must set the same value in his/her Registrar. Domain/Realm Set the dom ain name or IP address of the SIP Registrar server. Proxy Set [...]

Vigor2820 Series User’s Guide 165 can specify one of them or choose Any as ring port for specified SIP account. By the way, ISDN-S0 can be used by mapping with MSN numbers. Ring Pattern Choose a ring tone type for the VoIP phone call. 3 3 . . 1 1 1 1 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone se[...]

Vigor2820 Series User’s Guide 166 For Vigor2820VS/Vigor2820VSn models, you will see the following page: Phone List Port – For Vigor2820V/Vigor2820Vn, there are two phone ports provided here for you to configur e. However, for Vigor2820VS/Vigor2820VSn, there are three phone ports provided here for you to configure. Two (Index 1 to 2) are fixed a[...]

Vigor2820 Series User’s Guide 167 Disable Port The router can support up to 4 VoIP calls sim ultaneously. In general, only 3 VoIP calls can be dialed through ISDN at the same time. If you want to use four ISDN channels, you have to check this box. When the Phone port is disabled, it could not be used anymore. RTP Symmetric RTP – Check this box [...]

Vigor2820 Series User’s Guide 168 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r P P h h o o n n e e P P o o r r t t Click the number link for Phone port, you can access into t he following page for configuring Phone settings. Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatical[...]

Vigor2820 Series User’s Guide 169 Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigured schedules. Refer to section 3.8.2 Schedule for detailed configuration. Index (1-60) in Phone Book - Enter the index of ph one book profiles. Refer to section 3.11.1 DialPlan – Phone Book for de[...]

Vigor2820 Series User’s Guide 170 Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile nam es for the accounts as the default one for this phone setting. Play dial tone only when account registered - Check this box to invoke the function. Default Call Route It det[...]

Vigor2820 Series User’s Guide 171 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC D[...]

Vigor2820 Series User’s Guide 172 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 1 1 - - S S 0 0 P P o o r r t t Click the number link of Index 2 (ISDN1-S0), you can access into the following page for configuring Phone settings. Hotline Check the box to enable it. Type in the SIP URL in the field for d[...]

Vigor2820 Series User’s Guide 173 abc@iptel.org) as the site for call forwarded. Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call. During the period, the one who dial in will listen bus y tone, yet the local user will no[...]

Vigor2820 Series User’s Guide 174 invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile nam es for the accounts as the default one for this phone setting. ISDN-S0 port can pick up multiple incoming calls simult[...]

Vigor2820 Series User’s Guide 175 Region Select the proper region which you are located. The common settings of Caller ID Type , Dial tone , Ringing tone , Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ri[...]

Vigor2820 Series User’s Guide 176 recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC Dial Tone Power Leve l - This setting is used to adjust the [...]

Vigor2820 Series User’s Guide 177 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 2 2 - - T T E E P P o o r r t t ( ( A A v v a a i i l l a a b b l l e e f f o o r r V V S S n n m m o o d d e e l l o o n n l l y y ) ) Vigor2820VSn allows users to switch the func tion of ISDN2 port between TE or S0 mode.[...]

Vigor2820 Series User’s Guide 178 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically. Call Forward[...]

Vigor2820 Series User’s Guide 179 profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hi de the caller ID on the display panel of the phone set. Prefer Codec Select one of five codecs as the default for your VoIP calls. The codec used for each call will be negotiated with t[...]

Vigor2820 Series User’s Guide 180 Loop Through to ISDN1-S0 Port – Choose this radio button to make all the calls controlled by ISDN line. In addition, you can press the Advanced button to configure tone settings, volume gain, MISC and DTMF mode. Advanced setting is provided for fitting t he telecommunication custom for the local area of the rou[...]

Vigor2820 Series User’s Guide 181 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC D[...]

Vigor2820 Series User’s Guide 182 Payload Type (rfc2833) - Choose a nu mber from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. 3 3 . . 1 1 1 1 . . 4 4 S S t t a a t t u u s s From this page, you can find codec, connection and ot her important call status for each port. Refresh Seconds Specify the [...]

Vigor2820 Series User’s Guide 183 waiting for remote user’s answer. ALERTING - Indicates that a call is coming. ACTIVE- Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel. PeerID The present in-call or out-call peer ID (the format may be IP or Domain). Elapse The format is represented as [...]

Vigor2820 Series User’s Guide 184 3 3 . . 1 1 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s This web page allows you to enable ISDN function. ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local ISDN network, you should choose the correct country code. D-Ch[...]

Vigor2820 Series User’s Guide 185 default, MSN function is disabled. If you leave the fields blank, all incoming calls will be accepted without number matching. 1-10 fields – Fill in the portion that is di fferent with the own number. For example, the own number is 123456 7 and MSN numbers are 12345 50 , 12345 17 and 12345 82 respectively. You [...]

Vigor2820 Series User’s Guide 186 A A p p p p l l i i c c a a t t i i o o n n E E x x a a m m p p l l e e You got ISDN numbers with 59 72720~5972729 fro m your ISP, and you try to connect ISDN-TE port to ISDN network. Please refer to the following configuration. Open ISDN>> General Setup and set as the following: When remote user calls you [...]

Vigor2820 Series User’s Guide 187 3 3 . . 1 1 2 2 . . 3 3 D D i i a a l l t t o o S S i i n n g g l l e e / / D D u u a a l l I I S S P P s s Select Dialing to a Single ISP if you access the Internet via a single ISP. ISP Access Setup ISP Name - Enter your ISP name such as Seednet, Hinet and so on. Dial Number - Enter the ISDN access number provi[...]

Vigor2820 Series User’s Guide 188 IP Address Assignment Method (IPCP) In most environments, you should not change these settings as most ISPs provide a dynamic IP address for the router when it connects to the ISP. If your ISP provides a fixed IP address, check Yes and enter the IP address in the field of Fixed IP Address . Select Dialing to Dual[...]

Vigor2820 Series User’s Guide 189 Primary ISP Setup ISP Name - Enter your ISP name. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP. IP Address Assignment Method (IPCP) for primary ISP setup In most environments, you should not [...]

Vigor2820 Series User’s Guide 190 Click Dial ISDN . Wait for a moment after clicking the dial link. Then, a successful ISDN connection will be shown as the following.[...]

Vigor2820 Series User’s Guide 191 3 3 . . 1 1 2 2 . . 4 4 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router (only for the I SDN models) be remotely activated, or be able to dial up to the ISP via the ISDN interface. Vigor routers provide this feature by allowing user to make a phone call to the router and then [...]

Vigor2820 Series User’s Guide 192 method for PPP/MP connections. Normally you can set it to PAP/CHAP for better compatibility. TCP Header Compression - VJ Compression : It is used for TCP/IP protocol header compression. Normally it is set to Yes to improve bandwidth utilization. Idle Timeout - Because our IDSN link type is Dial On Demand , the co[...]

Vigor2820 Series User’s Guide 193 In an Infrastructure Mode of wireless network, Vigor wireless router plays a role as an Access Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the same Internet connection via Vigor wireless router. The General Settings will set up the information of this wireless netw[...]

Vigor2820 Series User’s Guide 194 Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p By clicking the General Settings , a new web page will appear so th[...]

Vigor2820 Series User’s Guide 195 Mode At present, the router can connect to 11b Only, 11g Only, 11n Only, Mixed(11b+11g), Mixed(11 g+11n) and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mix (11b+11g+11n) mode. Index(1-15) Set the wireless LAN to work at certain time interval onl y. You may choose up to 4 schedules out of the 15 sc[...]

Vigor2820 Series User’s Guide 196 Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync filed instead of long pream ble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Check it to use Long P[...]

Vigor2820 Series User’s Guide 197 Download – Type the transmitting rate for data download. Default value is 30,000 kbps. 3 3 . . 1 1 3 3 . . 3 3 S S e e c c u u r r i i t t y y This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively. After configuring the correct settings, please click OK to save and invoke[...]

Vigor2820 Series User’s Guide 198 WPA2/802.1x Only- Accepts only WPA2 clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. Mixed (WPA+WPA2/802.1x only) - Accepts WPA and WPA2 clients simultaneously and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. WPA/PSK- Accepts on[...]

Vigor2820 Series User’s Guide 199 Enable Max Access Filter Select to enable the MAC Address filter for wireless LAN identified with SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN. For example, they can be grouped under SSID 1 and SSID 2 at the same time if you c[...]

Vigor2820 Series User’s Guide 200 3 3 . . 1 1 3 3 . . 5 5 W W P P S S WPS (Wi-Fi Protected Setup) provides easy procedure to m ake network connection between wireless station and wireless access point (vigor router) with the encryption of WPA and WPA2. Note: Such function is available for the wi reless station with WPS supported. It is the simple[...]

Vigor2820 Series User’s Guide 201 z If you want to use PIN code, you have to know the PIN code specified in wireless client. Then provide the PIN code of the wireless client you wish to connect to the vigor router. For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>>Security , you will see the f[...]

Vigor2820 Series User’s Guide 202 Authentication Mode Display current authentication mode of the router. Only WPA2/PSK and WPA/PSK support WPS. Configure via Push Button Click Start PBC to invoke Push-Button style WPS setup procedure. The router will wait for WPS requests from wireless clients about two minutes. The WPS LED on the router will bli[...]

Vigor2820 Series User’s Guide 203 The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be for warded to local wired or wireless hosts. In other words, only Repeater mod[...]

Vigor2820 Series User’s Guide 204 Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repea ter mode is for the second one. Security There are three ty pes for security, Disable , WEP and Pre-shared key . The setting you choose here will make the fol[...]

Vigor2820 Series User’s Guide 205 Key - Type 8 ~ 63 ASCII characters or 64 hexadecimal digits leading by “0x”. Bridge If you choose Bridge as the connecting mode, please type in the peer MAC address in these fields. Four peer MAC addresses are allowed to be entered in this page at one time. Yet please disable the unused link to get better per[...]

Vigor2820 Series User’s Guide 206 Aggregation MSDU Aggregation MSDU can combine fram es with different sizes. It is used for improving MAC layer’s performance for some brand’s clients. The default setting is Enable. 3 3 . . 1 1 3 3 . . 8 8 W W M M M M C C o o n n f f i i g g u u r r a a t t i i o o n n WMM is an abbreviation of Wi-Fi Multimed[...]

Vigor2820 Series User’s Guide 207 however, the difference between AC_BE and AC_BK categories must be greater. Txop It means transmission opportunity. For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission, please set greater value for them to get highest transmission opportunity. Specify the value ranging from 0 to[...]

Vigor2820 Series User’s Guide 208 Statistics It displays the statistics for the channels used by APs. Add to If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page or choose the AP MAC address from the Scan result field, and click Bridge or Repeater . Next, click Add to . Later, the MAC[...]

Vigor2820 Series User’s Guide 209 3 3 . . 1 1 4 4 U U S S B B A A p p p p l l i i c c a a t t i i o o n n USB diskette can be regarded as a server. By way of Vigor router, clients on LAN can access, write and read data stored in USB diskette. After setting the configuration in USB Application , you can type the IP address of the Vigor router and [...]

Vigor2820 Series User’s Guide 210 3 3 . . 1 1 4 4 . . 2 2 F F T T P P U U s s e e r r M M a a n n a a g g e e m m e e n n t t This page allows you to set profiles for FTP users. Any user who wants to access into the USB diskette must type the same username and password configured in this page. Before adding or modifying settings in this page, ple[...]

Vigor2820 Series User’s Guide 211 Password Type the password for FTP users for accessing FTP server. Later, you can open FTP client software and type the password specified here for accessing into USB storage diskette. Confirm Password Type the password again to make confirmation. Home Folder It determines the range for the client to access into.[...]

Vigor2820 Series User’s Guide 212 Free Capacity It display s the free space of the USB diskette. Click Refresh at any time to get new status for free capacity. Username It displa ys the username that user uses to login to the FTP server. IP Address It displays the IP address of the user’s host which connecting to the FTP server. When you insert[...]

Vigor2820 Series User’s Guide 213 Model Name Display the m odel name of the router. Firmware Version Display the firmware version of the router. Build Date/Time Display the date and time of the current firmware build. ADSL Firmware Version Display the ADSL firmware version. LAN------- MAC Address Display the MAC address of the LAN Interface. 1 st[...]

Vigor2820 Series User’s Guide 214 Firmware Version It indicates information about equipped WLAN m iniPCi card. This also helps to provide availability of some features that are bound with some WLAN miniPCi. SSID Display the SSID of the router. 3 3 . . 1 1 5 5 . . 2 2 T T R R - - 0 0 6 6 9 9 This device supports TR-069 standard. It is very conveni[...]

Vigor2820 Series User’s Guide 215 3 3 . . 1 1 5 5 . . 3 3 A A d d m m i i n n i i s s t t r r a a t t o o r r P P a a s s s s w w o o r r d d This page allows you to set new password. Old Password Type in the old password. The factory default setting for password is blank. New Password Type in new password in this filed. Confirm Password Type in [...]

Vigor2820 Series User’s Guide 216 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself. 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating exam ples. The Mac or Linux plat[...]

Vigor2820 Series User’s Guide 217 3 3 . . 1 1 5 5 . . 5 5 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow debug equipm ents. Enable (Syslog Access…) Check “ Enable ” to activate functi[...]

Vigor2820 Series User’s Guide 218 For viewing the Syslog, please do the following: 1. Just set your monitor PC’s IP address in the field of Server IP Address 2. Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu. 3. From the Syslog screen, select the router y[...]

Vigor2820 Series User’s Guide 219 Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as router’s system time. Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol. Server IP Addr[...]

Vigor2820 Series User’s Guide 220 3 3 . . 1 1 5 5 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the settings for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session. The default value is 506[...]

Vigor2820 Series User’s Guide 221 Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a pr oper name. The default setting is public. Notification Host[...]

Vigor2820 Series User’s Guide 222 3 3 . . 1 1 5 5 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this ex[...]

Vigor2820 Series User’s Guide 223 3 3 . . 1 1 6 6 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 6 6 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial-ou[...]

Vigor2820 Series User’s Guide 224 3 3 . . 1 1 6 6 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Refresh Click it to reload the page. 3 3 . . 1 1 6 6 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content [...]

Vigor2820 Series User’s Guide 225 3 3 . . 1 1 6 6 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address assignments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Index It displays the connection item[...]

Vigor2820 Series User’s Guide 226 Peer IP:Port It indicates the destination IP address an d port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. 3 3 . . 1 1 6 6 . . 6 6 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen t[...]

Vigor2820 Series User’s Guide 227 3 3 . . 1 1 6 6 . . 7 7 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management. You have to enable IP bandwidth limi[...]

Vigor2820 Series User’s Guide 228 Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column. 3 3 . . 1 1 6 6 . . 8 8 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click [...]

Vigor2820 Series User’s Guide 229 3 3 . . 1 1 6 6 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run . The result of route trace will be shown on the screen. T[...]

Vigor2820 Series User’s Guide 230 This page is left blank.[...]

Vigor2820 Series User’s Guide 231 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d [...]

Vigor2820 Series User’s Guide 232 general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5. Set[...]

Vigor2820 Series User’s Guide 233 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s selected, yo[...]

Vigor2820 Series User’s Guide 234 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B [...]

Vigor2820 Series User’s Guide 235 2. Then, for usi ng PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LA[...]

Vigor2820 Series User’s Guide 236 If an IPSec-based service is selected, y ou should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ[...]

Vigor2820 Series User’s Guide 237 If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A[...]

Vigor2820 Series User’s Guide 238 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

Vigor2820 Series User’s Guide 239 3. Go to Remote Dial-In User . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security M[...]

Vigor2820 Series User’s Guide 240 If a PPP-based service is select ed, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel to Vigor router. For Win2000/XP, please[...]

Vigor2820 Series User’s Guide 241 3. In Step 2. Connect to VPN Server , click Insert button to ad d a new entry. If an IPSec-based service is selected as shown below, You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in [...]

Vigor2820 Series User’s Guide 242 If a PPP-based service is selected, you should further specify the remote VPN server IP address, Username, Password, and encryption method. The User Name and Password should be consistent with the one set up in the VPN router. To use default gateway on remote network means that all the packets of remote host will[...]

Vigor2820 Series User’s Guide 243 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he would use V igor router at home to connect to the server in the headquarter office downtown via either HTTPS or VPN to check email and acc[...]

Vigor2820 Series User’s Guide 244 5. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS . And click OK . 6. Click Setup link for W AN1. 7. Check Enable UDP Bandwidth Contr ol on the bottom to prevent enorm ous UDP traf fic of V oIP influent other applicatio[...]

Vigor2820 Series User’s Guide 245 8. If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m ay set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. 9. Click Edit to open the following window . Che[...]

Vigor2820 Series User’s Guide 246 10. Then click Edit of Local Address to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s IP address. Leave other fields and click OK . 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the c[...]

Vigor2820 Series User’s Guide 247 T o use another DHCP server in the network rather than the built-in one of V i gor Router , you have to change the settings as show below . Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

Vigor2820 Series User’s Guide 248 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers. John?[...]

Vigor2820 Series User’s Guide 249 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: draytel 1 Registe[...]

Vigor2820 Series User’s Guide 250 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each ot her’s IP address and assign an Account Name for the port used for calling. Ar[...]

Vigor2820 Series User’s Guide 251 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The file RTSxxx.exe will be asked to copy onto your computer. Remember the place of storing the execution file. [...]

Vigor2820 Series User’s Guide 252 5. Double click on the router tool icon. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 8. Type in your router IP, usually 19[...]

Vigor2820 Series User’s Guide 253 10. Click Send . 11. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Go to Certificate Management and choose Local[...]

Vigor2820 Series User’s Guide 254 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. 4. Connect to C A server via web browser. Follow the instruction to submit the request. Below we t[...]

Vigor2820 Series User’s Guide 255 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below. Then you have done the request and the server [...]

Vigor2820 Series User’s Guide 256 you will find the below window showing “------BEGINE CERTIFICATE------.....” 6. You may review the detail information of the certificate by clicking View button.[...]

Vigor2820 Series User’s Guide 257 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA cert[...]

Vigor2820 Series User’s Guide 258 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refres[...]

Vigor2820 Series User’s Guide 259 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. z Che[...]

Vigor2820 Series User’s Guide 260 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong network[...]

Vigor2820 Series User’s Guide 261 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configur[...]

Vigor2820 Series User’s Guide 262 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most import[...]

Vigor2820 Series User’s Guide 263 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly. Click WAN1 or WAN2 link to review the settings that you configured previo[...]

Vigor2820 Series User’s Guide 264 F F o o r r M M P P o o A A U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if DSL Modem Settings is set appropriately. Check if IP Address, Subnet Mask and Gateway are set correctly (must identify with the values from your ISP) if you choose Specify an IP address . F F o o r r S S t t a a[...]

Vigor2820 Series User’s Guide 265 F F o o r r P P P P T T P P U U s s e e r r s s 1. Check if the Enable option for PPTP Link is selected. 2. Check if PPTP Server, Username, Password and WAN IP address are set correctly (must identify with the values from your ISP). 5 5 . . 5 5 P P r r o o b b l l e e m m s s f f o o r r 3 3 G G N N e e t t w w o[...]

Vigor2820 Series User’s Guide 266 C C h h e e c c k k i i f f U U S S B B L L E E D D l l i i g g h h t t s s o o n n o o r r o o f f f f You have to wait about 15 seconds after inserting 3G USB Modem into your Vigor2820. Later, the USB LED will light on which means the installation of USB Modem is successful. If the USB LED does not light on, pl[...]

Vigor2820 Series User’s Guide 267 Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK . After few seconds, the router will return all th e settings to the factory settings. H H a a r r d d w w a a r r e e R R e e s s e e t t While the router i[...]

Vigor2820 Series User’s Guide 268 This page is left blank.[...]

Vigor2820 Series User’s Guide 269 A A p p p p e e n n d d i i x x : : H H a a r r d d w w a a r r e e S S p p e e c c i i f f i i c c a a t t i i o o n n s s Operating : 0°C ~ 45°C Temperature Storage : -25°C ~ 70°C Humidity 10% ~ 90% ( non-condensing ) Max. Power Consumption 10 W att Dimension L241 * W 165 * H44 Power DC 12V ~ 15V[...]