Draytek Vigor2850n manual

[...]

Vigor2850 Series User’s Guide ii[...]

Vigor2850 Series User’s Guide iii Vigor2850 Series VDSL2 Security Firewall User’s Guide Version: 2.0 Firmware Version: V3.6.2_RC1 Date: 12/03/2012[...]

Vigor2850 Series User’s Guide iv Copyright Information Copyright Declarations Copyright 2012 All rights reserved. This pub lication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language withou t written permission from the copyright [...]

Vigor2850 Series User’s Guide v European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Roa d, Hukou T ownship, Hsinchu Ind ustrial Park, Hsinchu C ounty, Taiwan 303 Product: Vigor2850 Ser ies Router DrayTek Corp. declares that Vigor2850 Series of ro uters are in compliance with the following essential requirements a[...]

Vigor2850 Series User’s Guide vi[...]

Vigor2850 Series User’s Guide vii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s Pref ace .......................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1 1.2 LED [...]

Vigor2850 Series User’s Guide viii 3.2.1 Basics of LAN ............................................................................................................ ..... 86 3.2.2 Genera l Setup ............................................................................................................ ..... 88 3.2.3 Static Route .................[...]

Vigor2850 Series User’s Guide ix 3.10.3 Remote Acce ss Control .............................................................................................. 202 3.10.4 PPP General Setup .................................................................................................... 203 3.10.5 IPSec Gene ral Setup ............................[...]

Vigor2850 Series User’s Guide x 3.17 Diagno stics ............................................................................................................... ......... 309 3.17.1 Dial-out Trigge ring ..................................................................................................... . 309 3.17.2 Routin g Table ..............[...]

Vigor2850 Series User’s Guide 1 P P r r e e f f a a c c e e Vigor2850 series is a VDSL2 router. It integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly, an[...]

Vigor2850 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 8 8 5 5 0 0 LED Status Explanation Blinking[...]

Vigor2850 Series User’s Guide 3 Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blin king). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, re lease the button. Then the router will restart with the factory default confi guration[...]

Vigor2850 Series User’s Guide 4 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 8 8 5 5 0 0 n n LED Status Explanation Blinking The router is powere d on and running normal ly. ACT (Activity) Off The router is powe red off. On USB device is connected and ready for use. USB Blinking The data is transmitting. On Internet connection is ready[...]

Vigor2850 Series User’s Guide 5 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on once to wait for client device making net work c onnection t hrough WP S. Press "Wireless LAN ON/OFF/WPS" butt on twice to enable (WLAN LED on) or disable ( WLAN LED of f) wireless c onnection. Factory Reset Re[...]

Vigor2850 Series User’s Guide 6 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 8 8 5 5 0 0 V V n n LED Status Explanation Blinking The router is powe red on and running norm ally. ACT (Activity) Off The router is p owered of f. On USB device is connected and ready for use. USB Blinking The data is transmitting. On Internet connection is [...]

Vigor2850 Series User’s Guide 7 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on once to wait for client device making net work c onnection t hrough WP S. Press "Wireless LAN ON/OFF/WPS" butt on twice to enable (WLAN LED on) or disable ( WLAN LED of f) wireless c onnection. Factory Reset Re[...]

Vigor2850 Series User’s Guide 8 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 8 8 5 5 0 0 i i LED Status Explanation Blinking The router is powere d on and running normal ly. ACT (Activity) Off The router is powe red off. On USB device is connected and ready for use. USB Blinking The data is transmitting. On Internet connection is ready[...]

Vigor2850 Series User’s Guide 9 Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blin king). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, re lease the button. Then the router will restart with the factory default confi guration[...]

Vigor2850 Series User’s Guide 10 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the XDSL interface to the external XDSL splitter with an XDSL line cable for all models. For Vigor2850Vn, also connect Line int[...]

Vigor2850 Series User’s Guide 11 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for shar ing printing. All the PCs connected this router can print documents via the router. The exam ple provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please[...]

Vigor2850 Series User’s Guide 12 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port . Click Next .[...]

Vigor2850 Series User’s Guide 13 6. In the following dialog, type 192.168.1.1 (router’ s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next . 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish .[...]

Vigor2850 Series User’s Guide 14 9. Now, your system will ask you t o choose right na me of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When y ou finish the selection, click Next . 10. For the final stage, you need to g o back to Control Panel-> Printers and edit the property of the ne[...]

Vigor2850 Series User’s Guide 15 The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Note 1: Some printers with the fax/scanning or ot her additional fun ctions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to f[...]

Vigor2850 Series User’s Guide 16 This page is left blank.[...]

Vigor2850 Series User’s Guide 17 B B a a s s i i c c S S e e t t t t i i n n g g s s For using the router properly, it is necessar y for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password for accessing into the web configurator of Vigor router and how to ad[...]

Vigor2850 Series User’s Guide 18 4. Now, the Main Screen will appear. Note: The home page will be different slightly in accordance with the ty pe of the router you have. 5. The web page can be logged out according to the chosen condition. The default setting is Auto Logout , which means the web configuration system will logout after 5 m in utes w[...]

Vigor2850 Series User’s Guide 19 2 2 . . 2 2 C C h h a a n n g g i i n n g g P P a a s s s s w w o o r r d d Please change the password for the or iginal security of the router. 1. Open a web browser on your PC and type http://192. 168.1.1. A pop-up window will open to ask for username and password. 2. Please type “admin/admin” as Username/Pa[...]

Vigor2850 Series User’s Guide 20 2 2 . . 3 3 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y. The first screen of Quick Start Wizard is entering login password. After ty ping the passwor[...]

Vigor2850 Series User’s Guide 21 2 2 . . 3 3 . . 1 1 F F o o r r W W A A N N 1 1 ( ( A A D D S S L L / / V V D D S S L L ) ) WAN1 is specified for ADSL or VDSL connection. You have to select the appropriate Internet access type according to the information from your ISP . For example, you should select PPPoE mode if the ISP provides you PPPoE int[...]

Vigor2850 Series User’s Guide 22 interface. Choose PPPoE or PPPoA as the protocol. For ADSL Only Such field is provided for ADSL onl y . You have to choose encapsulation and type the values for VPI and VCI. Or, click Auto detect to find out the best values. Fixed IP Click Yes to enable Fixed IP feature. IP Address Type the IP address if Fixed IP [...]

Vigor2850 Series User’s Guide 23 Item Description Password Assign a valid password provided by the ISP. Confirm Password Retype the password. 3. Please manually enter the Username/Passwor d provided by your ISP. Then click Next for viewing summary of such connection. 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the[...]

Vigor2850 Series User’s Guide 24 M M P P o o A A / / S S t t a a t t i i c c o o r r D D y y n n a a m m i i c c I I P P 1. Choose WAN1 as WAN Interface and click the Next button; you will get the following page. Available settings are explained as follows: Item Description Protocol There are two modes offered for you to choose for WAN1 interface[...]

Vigor2850 Series User’s Guide 25 Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. 2. Please type in the IP address/mask/gateway info rmation originally provided by your ISP. T[...]

Vigor2850 Series User’s Guide 26 2 2 . . 3 3 . . 2 2 F F o o r r W W A A N N 2 2 ( ( E E t t h h e e r r n n e e t t ) ) WAN2 is dedicated to physical mode in Ethernet. If you choose WAN2, please specify physical type. Then, click Next . On the next page as shown below, please select the appropriate Internet access type according to the informati[...]

Vigor2850 Series User’s Guide 27 2. Click PPPoE as the Internet Access Type. Then click Next to continue. Available settings are explained as follows: Item Description User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Back Click it to return[...]

Vigor2850 Series User’s Guide 28 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet. P P P P T T P P / / L L 2 2 T T P P 1. Choose WAN2 as the WAN Interface and click the Next button. The following page will be open for you to[...]

Vigor2850 Series User’s Guide 29 Available settings are explained as follows: Item Description User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. WAN IP Configuration Obtain an IP address automatically – the router will get an IP address au[...]

Vigor2850 Series User’s Guide 30 5. Now, you can enjoy surfing on the Internet. S S t t a a t t i i c c I I P P 1. Choose WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. 2. Click Static IP as the Internet Access type. Simply click Next to continue. Available settings ar[...]

Vigor2850 Series User’s Guide 31 Item Description WAN IP Type the IP address. Subnet Mask Type the subnet mask. Gateway Type the IP address of gateway. Primary DNS Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Next Click it t[...]

Vigor2850 Series User’s Guide 32 D D H H C C P P 1. Choose WAN2 as WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. 2. Click DHCP as the Internet Access type. Simply click Next to continue. Available settings are explained as follows: Item Description Host Name Type the name of the [...]

Vigor2850 Series User’s Guide 33 Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. 3. After finished the settings above, click Next for viewing summary of such connection. 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.[...]

Vigor2850 Series User’s Guide 34 2 2 . . 3 3 . . 3 3 F F o o r r W W A A N N 3 3 ( ( U U S S B B ) ) 1. Choose WAN3 as WAN Interface. 2. Then, click Next for viewing summary of such connection. 3. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 4. Now, you can enjoy surfi[...]

Vigor2850 Series User’s Guide 35 2 2 . . 4 4 S S e e r r v v i i c c e e A A c c t t i i v v a a t t i i o o n n W W i i z z a a r r d d Service Activation Wizard can guide you to activate WCF service (Web Content Filter) with a quick and easy way. For the Service Activation Wizard is only available for admin operation, therefore, please type “[...]

Vigor2850 Series User’s Guide 36 3. In the following page, you can activate the We b content filter services at the same time or individually. When you finish the selection, please click Next . Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek&ap[...]

Vigor2850 Series User’s Guide 37 Note: The service will be activated and applied as the default rule configured in Firewall>>General Setup . 6. Now, the web page will display the service th at you have activated according to your selection(s). The valid time for the free trial of these services is one month. Later, if you need to extend the[...]

Vigor2850 Series User’s Guide 38 2 2 . . 5 5 O O n n l l i i n n e e S S t t a a t t u u s s 2 2 . . 5 5 . . 1 1 P P h h y y s s i i c c a a l l C C o o n n n n e e c c t t i i o o n n Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. P P h h y y s s i i c c a a l [...]

Vigor2850 Series User’s Guide 39 Detailed explanation (for IPv4) is shown below: Item Description LAN Status Primary DNS- Displays the primary DNS server address for WAN interface. Secondary DNS - Displays the secondary DNS server address for WAN interface. IP Address -Displays the IP address of the LAN interface. TX Packets -Displays the total t[...]

Vigor2850 Series User’s Guide 40 Item Description Mode - Displays the type of WAN connection (e.g., TSPC). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. Gateway IP - Displays the IP address of the default gateway. Note: The words in green mean that the WAN connection of that interface is [...]

Vigor2850 Series User’s Guide 41 2 2 . . 6 6 V V D D S S L L This menu allows you to check VDSL status and configure VDSL settings for you request. 2 2 . . 6 6 . . 1 1 V V D D S S L L S S t t a a t t u u s s This page displays the VDSL information for su ch router such as current connection status, the firmware version of such router, the prof il[...]

Vigor2850 Series User’s Guide 42 Ｇ .hs Carrier Set Choose one of the items as the G.hs Carrier Set. Each set will have different frequenc y indices and maximum power level for data in upstream and downstream. Bit Swap As line conditions change, b it swapping allows the modem to swap bits around different channels without retraining, as each cha[...]

Vigor2850 Series User’s Guide 43 2 2 . . 8 8 R R e e g g i i s s t t e e r r i i n n g g V V i i g g o o r r R R o o u u t t e e r r You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the st[...]

Vigor2850 Series User’s Guide 44 4 The following page will be displayed after you logging in MyVigor. From this page, please click Add or Product Registration . 5 When the following page appears, please t ype in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click o n the box of Regis[...]

Vigor2850 Series User’s Guide 45 7 Now, you have finished the product registration. 8 After clicking OK , you will see the following page. Your router has been registered to myvigor website successfully. If you have not activated web content filter service by using Service Activation Wizard , you can activate the service from this step. Please cl[...]

Vigor2850 Series User’s Guide 46 11 When this page appears, click Register . 12 Wait for a moment until the following page appears. 13 Click Close .[...]

Vigor2850 Series User’s Guide 47 W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n This chapter will guide users to execute web configuration. 1. Open a web browser on your PC and type http://192. 168.1.1. The window will ask for typing username and password. 2. Please type “admin/admin” on Username/Password for administration o[...]

Vigor2850 Series User’s Guide 48 W W h h a a t t a a r r e e P P u u b b l l i i c c I I P P A A d d d d r r e e s s s s a a n n d d P P r r i i v v a a t t e e I I P P A A d d d d r r e e s s s s As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned b[...]

Vigor2850 Series User’s Guide 49 3 3 . . 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This section will introduce some ge neral settings of Internet a nd explain the connection modes for WAN1, WAN2 and WAN3 in details. This router supports multiple-WAN function. It allows users to access Internet and com bine the bandwidth of the m[...]

Vigor2850 Series User’s Guide 50 Physical Mode / Type Display the physical mode and physical type of such WAN interface. Line Speed Display the downstream and upstream rate of such WAN interface. Active Mode Display whether such WAN interface is Active device or backup device. Backup WAN Display the Backup WAN interface for such WAN when it is di[...]

Vigor2850 Series User’s Guide 51 Physical Mode Display the physical mode of such interface. If VDSL is detected, this field will display “ VDSL ”; if ADSL is detected, it will display “ ADSL ”. Fallback Mode It allows you to specify which physical connection is used. Once the mode is specified, the router will not detect physical mode aut[...]

Vigor2850 Series User’s Guide 52 Active Mode Choose Always On to make the WAN1 connection being activated always; Backup Type If you choose Backup as the Active M o de , Backup Type will appear. Please specify which WAN will be the Backup interface. When any WAN disconnect – Such backup WAN will be activated when any master WAN interfa ce disco[...]

Vigor2850 Series User’s Guide 53 Physical type You can change the physical type for W AN2 or choose Auto negotiation for determined by the system. Line Speed If your choose According to Line Speed as the Load Balance Mode , please type the line speed for downloading and uploading for such WAN interface. The unit is k bps. VLAN Tag insertion Enabl[...]

Vigor2850 Series User’s Guide 54 Available settings are explained as follows: Item Description Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface. Display Name Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. Physical [...]

Vigor2850 Series User’s Guide 55 Backup Type If you choose Backup as the Active M o de , Backup Type will appear. Please specify which WAN will be treated as the Backup WAN. When any WAN disconnect – Such backup WAN will be activated when any master WAN interfa ce disconnects. When all WAN disconnect – Such backup WAN will be activated only w[...]

Vigor2850 Series User’s Guide 56 Item Description Index Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3 that entered in general setup. Physical Mode It shows the physical connection for WAN1(ADSL/VDSL) /WAN2 (Ethernet) /WAN3 (3G USB Modem) according to the real network connection. Access Mode Use the drop down list[...]

Vigor2850 Series User’s Guide 57 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E / / P P P P P P o o A A i i n n W W A A N N 1 1 To choose PPPoE /PPPoA as the accessing pr otocol of the Internet, please select PPPoE/PPPoA from the WAN> > Internet Access >>WAN1 page. The following web page will be shown. Ava[...]

Vigor2850 Series User’s Guide 58 settings in this group. Modulation –Default setting is Multimode. Choose the one that fits the requirement of your router. PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router. When PPPoA p[...]

Vigor2850 Series User’s Guide 59 checking this box. If it is checked, the system will ask you to type another group of acc ount and password additionally. PPP Authentication – Select PAP only or PAP or CHAP for PPP. If you want to connect to Internet all the time, you can check Always On . Idle Timeout – Set the timeout for breaking down the [...]

Vigor2850 Series User’s Guide 60 D D e e t t a a i i l l s s P P a a g g e e f f o o r r M M P P o o A A / / S S t t a a t t i i c c o o r r D D y y n n a a m m i i c c I I P P i i n n W W A A N N 1 1 MPoA is a specification that enables ATM ser vices to be integrated with existing LANs, which use either Ethernet, token-ring or TCP/ IP protocols.[...]

Vigor2850 Series User’s Guide 61 Modulation –Default setting is Multimode. Choose the one that fits the requirement of your router. ISDN Dial Backup Setup This setting is only available for the router supporting ISDN function. Before utilizing the ISDN dial backup feature, you must create a dial backup profile first. Please click ISDN > Dial[...]

Vigor2850 Series User’s Guide 62 function. Bridge Mode If you choose Bridged IP as the protocol, you can check this box to invoke the function. The router will work as a bridge modem. WAN IP Network Settings This group allows you to obtain an IP address automatically and allows you type in IP address manually. WAN IP Alias - If you have multiple [...]

Vigor2850 Series User’s Guide 63 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E i i n n W W A A N N 2 2 To choose PPPoE as the accessing protocol of the Internet, please select PPPoE from the WAN> > Internet Access >>W AN2 page. The following web page will be shown. Available settings are explained as foll[...]

Vigor2850 Series User’s Guide 64 ISDN Dial Backup Setup This setting is only available for the router supporting ISDN function. Before utilizing the ISDN dial backup feature, you must create a dial backup profile first. Please click ISDN > Dialing to a Single ISP to create the backup profile. None - Disable the backup function. Packet Triggeri[...]

Vigor2850 Series User’s Guide 65 IP Address Assignment Method (IPCP) Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact y[...]

Vigor2850 Series User’s Guide 66 Available settings are explained as follows: Item Description Enable / Disable Click Enable for activating this function. If you click Disable , this function will be closed and all the settings that you adjusted in this page will be invalid. ISDN Dial Backup Setup This setting is only available for the router sup[...]

Vigor2850 Series User’s Guide 67 environments because some ISPs will drop connections if there is no traffic within certain periods of time. Check Enable PING to keep alive box to activate this function. PING to the IP - If you enable the PING function, please specify the IP address for the system to PING it for keeping alive. PING Interval - Ent[...]

Vigor2850 Series User’s Guide 68 IP Address : Type the IP address. Subnet Mask : Type the subnet mask. Gateway IP Address : Type the gateway IP address. Default MAC Address : Click this radio button to use default MAC address for the router. Specify a MAC Address : Some Cable service providers specify a specific MAC address for acce ss authentica[...]

Vigor2850 Series User’s Guide 69 Disable – Click this radio button to close the connection through PPTP or L2TP. Server Address - Specify the IP address of the PPTP/L2TP server if you enable PPTP/L2TP client mode. Specify Gateway IP Address – Specify the gateway IP address for DHCP server. ISP Access Setup Username -Type in the usernam e prov[...]

Vigor2850 Series User’s Guide 70 Fixed IP - Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want t[...]

Vigor2850 Series User’s Guide 71 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P i i n n W W A A N N 3 3 To use PPP (for 3G USB Modem) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPP mode for WAN2. The following web page will be shown. Available settings are explained as[...]

Vigor2850 Series User’s Guide 72 PPP Username Type the PPP username (optional). PPP Password Type the PPP password (optional). Always On If you want to connect to Internet all the time, you can check Always On . Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action. Index (1-15) in Sched[...]

Vigor2850 Series User’s Guide 73 Below shows an example for successful IPv6 connection based on PPPoE mode. Note : At present, the IPv6 prefix can be acquired via the PPPo E mode connection which is available for the areas such as Taiwan (h inet), the Netherlands, Australia and UK. D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P v[...]

Vigor2850 Series User’s Guide 74 Available settings are explained as follows: Item Description Username Type the name obtained from the broker. It is suggested for you to apply another usernam e and password for http://gogonet.gogo6.com/ page/freenet6-account . Password Type the password assigned with the user name. Confirm Password Type the pass[...]

Vigor2850 Series User’s Guide 75 Username Type the name obtained from the broker. Please apply new account at http://www.sixxs.net/ . It is suggested for you to apply another username and password. Password Type the password assigned with the user name. Confirm Password Type the password again to make the confirm ation. Tunnel Broker Type the add[...]

Vigor2850 Series User’s Guide 76 D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P v v 6 6 – – S S t t a a t t i i c c I I P P v v 6 6 i i n n W W A A N N 1 1 / / W W A A N N 2 2 This type allows you to setup sta tic IPv6 address for WAN interface. Available settings are explained as follows: Item Description Static IPv6 Address[...]

Vigor2850 Series User’s Guide 77 3 3 . . 1 1 . . 4 4 M M u u l l t t i i - - P P V V C C s s This router allows you to create multi-PVCs for different data transferring for using. Simply go to Internet Access and select Multi-PVCs page. G G e e n n e e r r a a l l The system allows you to set up to eight cha nnels which are ready for choosing as [...]

Vigor2850 Series User’s Guide 78 Protocol Select a proper protocol for this channel. Encapsulation Choose a proper type for this channel. The types will be different according to the protocol setting that you choose. WAN link for Channel 5, 6 and 7 are provided for ro uter-borne application such as TR-069 . The settings must be applied and obtain[...]

Vigor2850 Series User’s Guide 79 WAN for Router-borne Application Choose the router service for channel 5, 6 or 7. Management - It can be specified for general management (Web configuration/telnet/TR069). If you choose Management, the configuration for this PV C will be effective for Web configuration/telnet/TR069. VoIP - It can be specified for [...]

Vigor2850 Series User’s Guide 80 MBS It represents Maxim u m Burst Size. The range of the value is 10 to 50. P P o o r r t t - - b b a a s s e e d d B B r r i i d d g g e e General page lets you set the first PVC. As to set the second PVC line, please click the Port-based Bridge tab to open Bridge configuration page. Available settings are explai[...]

Vigor2850 Series User’s Guide 81 Click Clear to remove all the configurations in th is page if you do not satisfy it. When you finish the configuration, please click OK to save and exit this page. Or click Cancel to abort the configuration and exit this page. 3 3 . . 1 1 . . 5 5 M M u u l l t t i i - - V V L L A A N N This router allows you to cr[...]

Vigor2850 Series User’s Guide 82 WAN link for Channel 5, 6 and 7 are provided for ro uter-borne application such as TR-069 . The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 5, 6 or 7 to configure your router. Available settings are explained as foll[...]

Vigor2850 Series User’s Guide 83 B B r r i i d d g g e e General page lets you set the first channel. As to set the third channel, please click the Bridge tab to open Bridge configuration page. Available settings are explained as follows: Item Description Enable Check this box to enable that channel. Only channel 3 to 8 can be set in this page, f[...]

Vigor2850 Series User’s Guide 84 3 3 . . 1 1 . . 6 6 L L o o a a d d - - B B a a l l a a n n c c e e P P o o l l i i c c y y This router supports the function of load balanci ng. It can assign traffic with protocol t ype, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN1, WAN2, and WAN3 interface. The user ca[...]

Vigor2850 Series User’s Guide 85 Click Index 1 to access into the following page for configuring load-balance policy. Available settings are explained as follows: Item Description Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Binding WAN interface Choose the WAN int[...]

Vigor2850 Series User’s Guide 86 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what type of public IP addresses co ming from your ISP . 3 3 . . 2 2 . . 1 1 B B a a s s i i c c s s o o f f L L A A N N The most generic function of V igor router is[...]

Vigor2850 Series User’s Guide 87 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the r[...]

Vigor2850 Series User’s Guide 88 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . There are four subnets provided by the router wh ich allow users to divide groups into d ifferent subnets (LAN1 – LAN4). In a[...]

Vigor2850 Series User’s Guide 89 D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 1 1 – – E E t t h h e e r r n n e e t t T T C C P P / / I I P P a a n n d d D D H H C C P P S S e e t t u u p p There are two configuration pages for LAN1 , Ethernet TCP/IP and DHCP Setup (based on IPv4) and IPv6 Setup. Click the tab for e ach[...]

Vigor2850 Series User’s Guide 90 server is located the relay agent should redirect the DHCP request to. S tart IP Address - Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 1st IP address of your rout er is 192.168.1.1, the starting IP address must be 192.168.1.2 or greater, but sm alle r th[...]

Vigor2850 Series User’s Guide 91 D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 1 1 – – I I P P v v 6 6 S S e e t t u u p p There are two configuration pages for LAN1 , Ethernet TCP/IP and DHCP Setup (based on IPv4) and IPv6 Setup. Click the tab for e ach type and refer to the following explanations for detailed informati[...]

Vigor2850 Series User’s Guide 92 list. DHCPv6 Server Configuration Enable Server –Click it to enable DHCPv6 server. DHCPv6 Server could assign IPv6 address to PC according to the Start/End IPv6 address configuration. Disable Server –Click it to disable DHCPv6 server. Start IPv6 Address / End IPv6 Address –Type the start and end address for [...]

Vigor2850 Series User’s Guide 93 D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 2 2 / / L L A A N N 3 3 / / L L A A N N 4 4 Available settings are explained as follows: Item Description Network Configuration Enable/Disable - Click Enable to enable such configuration; click Disable to disable such configuration. For NAT Usage [...]

Vigor2850 Series User’s Guide 94 Gateway IP Address - Enter a value of the gateway IP address for the DHCP serv er . The value is usually as same as the 1st IP address of the router, which means the ro uter is the default gateway . D D e e t t a a i i l l s s P P a a g g e e f f o o r r I I P P R R o o u u t t e e d d S S u u b b n n e e t t Avai[...]

Vigor2850 Series User’s Guide 95 DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol. The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client. It is highly recommended that you leave the router enabled as a DHCP serve[...]

Vigor2850 Series User’s Guide 96 3 3 . . 2 2 . . 3 3 S S t t a a t t i i c c R R o o u u t t e e Go to LAN to open setting page and choose Static Route . The router offers IPv4 and IPv6 for you to configure the static route. Both protocols brin g different web pages. S S t t a a t t i i c c R R o o u u t t e e f f o o r r I I P P v v 4 4 Availabl[...]

Vigor2850 Series User’s Guide 97 S S t t a a t t i i c c R R o o u u t t e e f f o o r r I I P P v v 6 6 You can set up to 40 profiles for IPv6 static route. Available settings are explained as follows: Item Description Index The number (1 to 40) unde r Index allows you to open next page to set up static route. Destination Address Displays the de[...]

Vigor2850 Series User’s Guide 98 Available settings are explained as follows: Item Description Enable Click it to enable this profile. Destination IPv6 Address / Prefix Len T ype the IP address with the prefix length for this entry . Gateway IPv6 Address T ype the gateway address for this entry . Network Interface Use the drop down list to specif[...]

Vigor2850 Series User’s Guide 99 1. Go to LAN page and click General Setup , select 1st Subnet as the RIP Protocol Control. Then click the OK button. Note: There are two reasons that we have to appl y RIP Protocol Control on 1st Subnet. The f irst is that the LAN inte rface can exchange RI P packets with the neighboring routers via the 1st subnet[...]

Vigor2850 Series User’s Guide 100 3 3 . . 2 2 . . 4 4 V V L L A A N N Virtual LAN function provides you a very convenient way to manage hosts by g rouping them based on the physical port. You can also mana ge the in/out rate of each port. Go to LAN page and select VLAN . The following page will appear. Click Enable to invoke VL AN function. Note:[...]

Vigor2850 Series User’s Guide 101 Subnet Choose one of them to make the selected VLAN mapping to the specified subnet only . For example, LAN1 is specified for VLAN0. It means that PCs grouped und er VLAN0 can get the IP address(es) that s pecified by the subnet. Note: Leave one VLAN untagged at least to prevent from not connecting to Vigor route[...]

Vigor2850 Series User’s Guide 102 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthening co ntrol in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC addr[...]

Vigor2850 Series User’s Guide 103 Refresh Refresh the ARP table listed below to obtain the newest ARP table information. Add and Edit IP Address – Type the IP address that will be used for the specified MAC address. Mac Address – Type the MAC address that is used to bind with the assigned IP address. Comment – Type a brief description for t[...]

Vigor2850 Series User’s Guide 104 Item Description Port Mirror Check Enable to activate this function. Or, check Disable to close this function. Mirror Port Select a port to view traffic sent from mirrored ports. Mirrored port Select which ports are necessary to be mirrored. After finishing all the settings here, please click OK to save the confi[...]

Vigor2850 Series User’s Guide 105 3 3 . . 3 3 . . 1 1 P P o o r r t t R R e e d d i i r r e e c c t t i i o o n n Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc. Most of the case, you need a public IP address for each server and this public IP addr[...]

Vigor2850 Series User’s Guide 106 Available settings are explained as follows: Item Description Enable Check this box to enable such port redirection setting. Mode Two options (Single and Range) are provided here for you to choose. To set a range for the specific service, select Range . In Range mode, if the public port (start port and end port) [...]

Vigor2850 Series User’s Guide 107 Note that the router has its own built-in servi ces (servers) such as T e lnet, HTTP and FTP etc. Since the common port numbers of these services (servers) are all the sa me, you may need to reset the router in order to avoid confliction. For example, the built-in web configurator in the router is with default po[...]

Vigor2850 Series User’s Guide 108 The security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: DMZ Host for WAN2 and WAN3 is slightly different with WAN1. Active True IP selection is available for WAN1 only. See the [...]

Vigor2850 Series User’s Guide 109 If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN2 interface , you will find them in Aux. WAN IP for your selection. Available settings are explained as follows: Item Description Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ ho[...]

Vigor2850 Series User’s Guide 110 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the appl icatio[...]

Vigor2850 Series User’s Guide 111 Available settings are explained as follows: Item Description Enable Open Ports Check to enable this entry. Comment Make a nam e for the defined network application/service. WAN IP Specify the WAN IP address that will be used for this entry. This setting is available when WAN IP Alias is configured. Local Compute[...]

Vigor2850 Series User’s Guide 112 Available settings are explained as follows: Item Description Protocol Display the protocol used for this address mapping. Public IP Display the public IP address se lected for this entry, e.g., 172.16.3.102. Private IP Display the private IP set for this address mapping, e.g., 192.168.1.10. Mask Display the subn[...]

Vigor2850 Series User’s Guide 113 WAN Interface Choose the WAN interface for such address mapping profile. WAN IP Select an IP address (the selections provided here are set in IP Alias List of Network >>WAN interface). Local host can use this IP to connect to Internet. If you want to choose any one of the Public IP settings, you must specif[...]

Vigor2850 Series User’s Guide 114 Triggering Protocol Display the protocol of the triggering packets. Triggering Port Display the port of the triggering packets. Incoming Protocol Display the protocol for the incom ing data of such triggering profile. Incoming Port Display the port for the incoming data of such triggering profile. Status Display [...]

Vigor2850 Series User’s Guide 115 Triggering Port Type the port or port range for such trigger profile. Incoming Protocol When the triggering packets received, it is expected the incoming packets will use the selected protocol. Select the protocol (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. Incoming Port Type the port [...]

Vigor2850 Series User’s Guide 116 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a packet based on the information in its header, stateful inspec[...]

Vigor2850 Series User’s Guide 117 1. SYN flood attack 2. UDP flood attack 3. ICMP flood attack 4. Port Scan attack 5. IP options 6. Land attack 7. Smurf attack 8. Trace route 9. SYN fragm ent 10. Fraggle attack 11. TCP flag scan 12. Tear dro p attack 13. Ping o f Death attack 14. ICMP fra gment 15. Unknow n protocol Below shows the menu items for[...]

Vigor2850 Series User’s Guide 118 Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Accept large incoming… Some on-line games (for example: Half Life) will use lots of fragmented UDP packets to transfer ga me data. Instinctively as a secure firewall, V igor router will reject these fra[...]

Vigor2850 Series User’s Guide 119 Available settings are explained as follows: Item Description Filter Select Pass or Block for the packets that do not match with the filter rules. Sessions Control The number typed here is the total sessions of the packets that do not match the filter rule configured in this page. The default setting is 60000. Qu[...]

Vigor2850 Series User’s Guide 120 APP Enforcement Select an APP Enforcement profile for global IM/P2P application blocking. If there is no profile for you to select, please choose [Create New] from the drop down list in this page to create a new profile. All the hosts in LAN must follow the standard configured in the APP Enforcement profile selec[...]

Vigor2850 Series User’s Guide 121 Advance Setting Click Edit to open the following window . However , it is strongly r ecommended to use the default settings here. Codepage - This function is used to com p are the characters among dif ferent languages. Choose correct codepage can help the system obtaining correct ASCII after decoding data from UR[...]

Vigor2850 Series User’s Guide 122 3 3 . . 4 4 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule num ber button to [...]

Vigor2850 Series User’s Guide 123 Available settings are explained as follows: Item Description Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description. Maximum length is 14- character long. Index(1-15) Set PCs on LAN to work at certain time interval only. You may choose up to 4 sch[...]

Vigor2850 Series User’s Guide 124 Direction Set the direction of packet flow. It is for Data Filter only. For the Call Filter , this setting is not available since Call Filter is only applied to outgoing traf fic. Note: RT means routing domain for 2nd subnet or other LAN. Source/Destination IP Click Edit to access into the follo wing dialog to ch[...]

Vigor2850 Series User’s Guide 125 Service Type Click Edit to access into the following dialog to choose a suitable service type. To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please choose Group and Obj[...]

Vigor2850 Series User’s Guide 126 Filter Specifies the action to be taken when packets match the rule. Block Immediately - Packets matching the rule will be dropped immediately. Pass Immediately - Packets matching the rule will be passed immediately. Block If No Further Match - A packet matching the rule, and that does not match furthe r rules, w[...]

Vigor2850 Series User’s Guide 127 APP Enforcement Select an APP Enforcement profile for global IM/P2P application blocking. If there is no profile for you to select, please choose [Create New] from the drop down list in this page to create a new profile. All the hosts in LAN must follow the standard configured in the APP Enforcement profile selec[...]

Vigor2850 Series User’s Guide 128 Advance Setting Click Edit to open the following window . However , it is strongly r ecommended to use the default settings here. Codepage - This function is used to com p are the characters among dif ferent languages. Choose correct codepage can help the system obtaining correct ASCII after decoding data from UR[...]

Vigor2850 Series User’s Guide 129 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is co mposed by 7 filter rules, which can b[...]

Vigor2850 Series User’s Guide 130 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Available settings[...]

Vigor2850 Series User’s Guide 131 Enable ICMP flood defense Check the box to activate the ICMP flood defense function. Similar to the UDP flood defense function, once if the Threshold of ICMP packets fro m Internet has exceeded the defined value, the router will discard the ICMP echo requests coming from the Internet. The default setting for thre[...]

Vigor2850 Series User’s Guide 132 Many machines may crash when receiving ICMP datagra ms (packets) that exceed the maximum length. To avoid this type of attack, the Vigor router is designed to be capable of discarding any fragmented ICMP packets with a length greater than 1024 octets. Block Ping of Death Check the box to activate the Block Ping o[...]

Vigor2850 Series User’s Guide 133 3 3 . . 5 5 U U s s e e r r M M a a n n a a g g e e m m e e n n t t User Management is a security feature which disallows any IP traffic (except DHCP-related packets) from a particular host until that host has correctly supplied a valid username and password. Instead of managing with IP a ddress/MAC address, User[...]

Vigor2850 Series User’s Guide 134 3 3 . . 5 5 . . 1 1 G G e e n n e e r r a a l l S S e e t t u u p p General Setup can determine the standard (rule -based or user-based) for the users controlled by User Management. The mode (standard) select ed here will influence the contents of the filter rule(s) applied to every user. Available settings are e[...]

Vigor2850 Series User’s Guide 135 3 3 . . 5 5 . . 2 2 U U s s e e r r P P r r o o f f i i l l e e This page allows you to set customized profiles (up to 200) which will be applied for users controlled under User Management . Simply open User Management>>User Profile . To set the user profile, please click any inde x number link to open the [...]

Vigor2850 Series User’s Guide 136 Available settings are explained as follows: Item Description Enable this account Check this box to enable such user profile. User Name Type a name for such user profile (e.g., LAN_User_Group_1, WLAN_User_Group_A, WLAN_User_Group_B, etc). When a user tries to access Internet through this router, an authentication[...]

Vigor2850 Series User’s Guide 137 For the detailed configuration, simply refer to Firewall>>Filter Rule . The firewall filter rules that are not selected in Firewall>>General>>Defa u lt rule can be available for use in User Management>>User Profile . External Service Authentication The router will authenticate the dial-in [...]

Vigor2850 Series User’s Guide 138 window with remaining time of connection for such user will be displayed. Next, the u ser can access Internet through any browser on Windows. Note that Alert Tool can be downloaded from DrayTek web site. Telnet – If it is selected, the user can use Telnet command to perform the authentication job. Landing Page [...]

Vigor2850 Series User’s Guide 139 Available settings are explained as follows: Item Description Name Type a name for this user group. Available User Objects You can gather user profiles (objects) from User Profile page within one user group. All the available user objects that you have created will be shown in this box. Notice that user object, A[...]

Vigor2850 Series User’s Guide 140 Available settings are explained as follows: Item Description Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh this page manually. Index Display the number of the data flow. Active User Dis[...]

Vigor2850 Series User’s Guide 141 3 3 . . 6 6 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/[...]

Vigor2850 Series User’s Guide 142 Click the number under Index co lumn for settings in detail. Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface. For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP[...]

Vigor2850 Series User’s Guide 143 MAC Address Type the MAC address of the network card which will be controlled. Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address ty pe is selected. Subnet Mask Type the subnet mask if the Subnet Address type is selected. Invert Selectio[...]

Vigor2850 Series User’s Guide 144 Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or Any to display all the available IP objects with [...]

Vigor2850 Series User’s Guide 145 3 3 . . 6 6 . . 3 3 I I P P v v 6 6 O O b b j j e e c c t t You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Available settings [...]

Vigor2850 Series User’s Guide 146 Address Type Determine the address ty pe for the IPv6 address. Select Single Address if this object contains one IPv6 address only. Select Range Address if this object contains several IPv6s within a range. Select Subnet Address if this object contains one subnet for IPv6 address. Select Any Address if this objec[...]

Vigor2850 Series User’s Guide 147 3 3 . . 6 6 . . 4 4 I I P P v v 6 6 G G r r o o u u p p This page allows you to bind several IPv6 objects into one IPv6 group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Click the number under Index colu mn for settings in detail. Available settings ar[...]

Vigor2850 Series User’s Guide 148 Name Type a name for this profile. Maximum 15 characters are allowed. Available IPv6 Objects All the available IPv6 objects with the specified interface chosen above will be shown in this box. Selected IPv6 Objects Click >> button to add the selected IPv6 objects in this box. 3 3 . . 6 6 . . 5 5 S S e e r r[...]

Vigor2850 Series User’s Guide 149 Name Type a name for this profile. Protocol Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number. (=) – when the fir[...]

Vigor2850 Series User’s Guide 150 3 3 . . 6 6 . . 6 6 S S e e r r v v i i c c e e T T y y p p e e G G r r o o u u p p This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles.[...]

Vigor2850 Series User’s Guide 151 Click the number under Index co lumn for settings in detail. Available settings are explained as follows: Item Description Name Type a name for this profile. Available Service Type Objects All the available service objects that you have added on Objects Setting>>Service Type Object will be shown in this box[...]

Vigor2850 Series User’s Guide 152 Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Click the number under Index column for setting in detail. Available settings are explained as follows: Item Description Name Type a name for this profile, e.g., game. Contents Type the content for such profil[...]

Vigor2850 Series User’s Guide 153 3 3 . . 6 6 . . 8 8 K K e e y y w w o o r r d d G G r r o o u u p p This page allows you to bind several keyword object s into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL /Web Content Filter Profile . Available settings are explained as follows: Item Description S[...]

Vigor2850 Series User’s Guide 154 Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects Click button to add the selected Keyword objects in this box. 3 3 . . 6 6 . . 9 9 F F i i l l e e [...]

Vigor2850 Series User’s Guide 155 Available settings are explained as follows: Item Description Profile Name Type a name for this profile. Type a name for such profile and check all the ite ms of file extension that will be processed in the router. Finally, click OK to save this profile.[...]

Vigor2850 Series User’s Guide 156 3 3 . . 7 7 C C S S M M P P r r o o f f i i l l e e C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n t t ( ( C C S S M M ) ) CSM is an abbreviation of Content Security Management which is used to control IM/P2P usage, filter the web content and URL conten t to reach [...]

Vigor2850 Series User’s Guide 157 3 3 . . 7 7 . . 1 1 A A P P P P E E n n f f o o r r c c e e m m e e n n t t P P r r o o f f i i l l e e You can define policy profiles for IM (Instan t Messenger)/P2P (Peer to Peer)/Protocol/Misc application. This page allows you to set 32 profiles for different requirements. The APP Enforcement Profile will be a[...]

Vigor2850 Series User’s Guide 158 Below shows the items which are categorized under Protocol . Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. Select All Click it to choose all of the items in this page. Clear All Uncheck all the select ed boxes. The profiles configured here can be appli[...]

Vigor2850 Series User’s Guide 159 The items categorized under P2P ----- The items categorized under Misc -----[...]

Vigor2850 Series User’s Guide 160 3 3 . . 7 7 . . 2 2 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the ina ppropriate web sites but also prohibit other web feature wher[...]

Vigor2850 Series User’s Guide 161 Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages that match with the conditions specified in URL Access Control and Web Feature below passin[...]

Vigor2850 Series User’s Guide 162 Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass w ill be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. URL Access Control Enable URL Access Control - Chec[...]

Vigor2850 Series User’s Guide 163 should be noticed that the more sim plified the blocking keyword list is, the more efficiently the Vigor router performs. Web Feature Enable Restrict Web Feature - Check this box to make the keyword being blocked or passed. Action - This setting is available only when Either: URL Access Control First or Either: W[...]

Vigor2850 Series User’s Guide 164 3 3 . . 7 7 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via System Maintenance>>Activation . Service Activation[...]

Vigor2850 Series User’s Guide 165 Setup Test Server It is recommended for you to use the default setting, auto-selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Test a site to verify whether it is categorized Click this link to do the verification. Set to Factory Default Click thi[...]

Vigor2850 Series User’s Guide 166 Available settings are explained as follows: Item Description Black/White List Enable – Activate white/black list function for such profile. Group/Object Selections – Click Edit to choose the group or object profile as the content of white/black list. Pass - allow accessing into the corresponding webpage with[...]

Vigor2850 Series User’s Guide 167 Action Pass - allow accessing into the co rresponding webpage with the categories listed on the box below. Block - restrict accessing into the corresponding webpage with the categories listed on the box below. If the web pages do not match with the specified feature set here, it will be processed with reverse act[...]

Vigor2850 Series User’s Guide 168 To activate the function of limit session, simply click Enable and set the default session limit. Available settings are explained as follows: Item Description Session Limit Enable - Click this button to activate the function of limit session. Disable - Click this button to close the function of limit session. De[...]

Vigor2850 Series User’s Guide 169 Specific Limitation Start IP- Def ines the start IP address for limit session. End IP - Defines the end IP address for limit session. Maximum Sessions - Defines the available session number for each host in the specific range of IP addresses. If you do not set the session number in this field, the system will use[...]

Vigor2850 Series User’s Guide 170 3 3 . . 8 8 . . 2 2 B B a a n n d d w w i i d d t t h h L L i i m m i i t t The downstream or upstream from FTP, HTTP or so me P2P applications will occupy large of bandwidth and affect the applications for othe r programs. Please use Limit Bandwidth to ma ke the bandwidth usage more efficient. In the Bandwidth M[...]

Vigor2850 Series User’s Guide 171 for each computer in LAN. Default RX limit - Define the default speed of the downstream for each computer in LAN. Allow auto adjustment … .- Check this box to make the best utilization of available bandwidth. Limitation List Display a list of specific limitations that you set on this web page. Specific Limitati[...]

Vigor2850 Series User’s Guide 172 other applications are not protected by QoS, it will detract much from their performance in the overcrowded network. This is especially essential to those are low tolerant of loss, delay or jitter (delay variation). Another reason is due to conges tions at network intersections where speeds of interconnected circ[...]

Vigor2850 Series User’s Guide 173 This page displays the QoS settings result of the WAN interface. Click the Setup link to access into next page for the general setup of W AN interface. As to class rule, simply click the Edit link to access into next for configuration. You can configure general setup for the WAN interface, edit the Class Rule, an[...]

Vigor2850 Series User’s Guide 174 O O n n l l i i n n e e S S t t a a t t i i s s t t i i c c s s Display an online statistics for quality of service for your reference. G G e e n n e e r r a a l l S S e e t t u u p p f f o o r r W W A A N N I I n n t t e e r r f f a a c c e e When you click Setup , you can configure the bandwidth ratio for QoS o[...]

Vigor2850 Series User’s Guide 175 Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. IN- apply to incoming traffic only. OUT- apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK , then click Setu[...]

Vigor2850 Series User’s Guide 176 E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one. After you click the Edit link, you will see the following page[...]

Vigor2850 Series User’s Guide 177 Item Description ACT Check this box to invoke these settings. Ethernet Type Please specify which protocol (IPv4 or IPv6) will be used for this rule. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit button to set the remote IP address (on LAN/WAN)[...]

Vigor2850 Series User’s Guide 178 E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page.[...]

Vigor2850 Series User’s Guide 179 For adding a new service type, click Add to open the following pag e. Available settings are explained as follows: Item Description Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP or other) for the new service. Port Configuration Type - Click Single or Range [...]

Vigor2850 Series User’s Guide 180 most popular DDNS service providers such as www.dyndns.org, www.no-ip.com, www.dtdns.com, www.changeip.com, www.dynamic- nameserver.com. You should visit their websites to register your own domain nam e for the router. Enable the Function and Add a Dynamic DNS Account 1. Assume you have a registered domain name f[...]

Vigor2850 Series User’s Guide 181 Available settings are explained as follows: Item Description Enable Dynamic DNS Account Check this box to enable the current account. If you did check the box, you will see a ch eck mark appeared on the Active column of the previous web page in step 2). WAN Interface WAN1/WAN2/WAN3 First - While connecting, the [...]

Vigor2850 Series User’s Guide 182 Mail Extender If the mail server is defined with another name, please type the name in this area. Such mail server will be used as backup mail exchange. Force WAN IP Update The system will renew the DDNS IP automatically within certain time. 4. Click OK button to activate the settings. You will see your setting h[...]

Vigor2850 Series User’s Guide 183 You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule, please click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below . Available settings are explained as follows: [...]

Vigor2850 Series User’s Guide 184 Example Suppose you want to control the PPPoE Internet acce ss connection to be always on (Force On) from 9:00 to 18:00 for whole week. Other time the Internet access connection should be disconnected (Force Down). Office Hour: (Force On) Mon - Sun 9:00 am to 6:00 pm 1. Make sure the PPPoE connection and T ime Se[...]

Vigor2850 Series User’s Guide 185 Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-ty pe the Shared Secret for confirmation. 3 3 . . 9 9 . . 4 4 L L D D A A P P / / A A c c t t i i v v e e D D[...]

Vigor2850 Series User’s Guide 186 3 3 . . 9 9 . . 5 5 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configurati on which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT router[...]

Vigor2850 Series User’s Guide 187 and configure port mappings on the rout er . Subse quently , such a facility forwards packets from the external ports of the router to the internal ports used by the application. The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your P[...]

Vigor2850 Series User’s Guide 188 3 3 . . 9 9 . . 6 6 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol . It is a communication protocol which is mainly used for managing the membership of Internet Protocol m ulticast groups. Available settings are explained as follows: Item Description Enable IGMP Proxy Check this bo[...]

Vigor2850 Series User’s Guide 189 3 3 . . 9 9 . . 7 7 W W a a k k e e o o n n L L A A N N A PC client on LAN can be woken up by the router it connects. When a user wants to wake up a specified PC through the router, he/she must type correct MAC address of the specified PC on this web page of Wake on LAN (WOL) of this router. In addition, such PC [...]

Vigor2850 Series User’s Guide 190 3 3 . . 9 9 . . 8 8 S S h h o o r r t t M M e e s s s s a a g g e e S S e e r r v v i i c c e e The function of Short Message Service is that Vi gor router sends a message to user’s mobile through specified service provider to assist the u ser knowing the real-time abnormal situations. Vigor router allows you t[...]

Vigor2850 Series User’s Guide 191 Available settings are explained as follows: Item Description Enable SMS Setup Click Enable to enable SMS function. Click Disable to close SMS function. Profile Name Type a name for such SMS profile. Service Provider Use the drop down list to s pecify the service provider which offers SMS service. Username Type a[...]

Vigor2850 Series User’s Guide 192 3 3 . . 1 1 0 0 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Intern et. In short, by VPN technolog y, you can send data between two computers across a s[...]

Vigor2850 Series User’s Guide 193 Please choose a LAN-to-LAN Profile There are 32 VPN profiles for users to set. 2. When you finish the mode and profile selection, please click Next to open the following page.[...]

Vigor2850 Series User’s Guide 194 In this page, you have to select suitable VPN type for the VPN client profile. Th ere are six types provided here. Different type will lead to different configuration page. After making the choices for the client profile, please click Next . You will see different configurations based on the selection(s) you made[...]

Vigor2850 Series User’s Guide 195 z When you choose L2TP , you will see the following graphic: z When you choose L2TP over IPSec (Nice to Have) or L2TP over IPSec (Must), you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to[...]

Vigor2850 Series User’s Guide 196 VPN Dial-Out Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router will use WAN1 as the first channel for VPN connection. If WAN1 fails, the router will use another WAN interface instead. WAN1 Only - Wh[...]

Vigor2850 Series User’s Guide 197 3. After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Available settings are explained as follows: Item Description Go to the VPN Connec[...]

Vigor2850 Series User’s Guide 198 3 3 . . 1 1 0 0 . . 2 2 V V P P N N S S e e r r v v e e r r W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connec tion (from client to server) step by step. 1. Open VPN and Remote Access>>VPN Server W[...]

Vigor2850 Series User’s Guide 199 Please choose a LAN-to-LAN Profile This item is available when you choose Site to Site VPN (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set. Please choose a Dial-in User Accounts This item is available when you choose Remote Dial-in User (Teleworker) as VPN server mode. There are 32 VPN[...]

Vigor2850 Series User’s Guide 200 z When you check PPTP , you will see the following graphic: z When you check PPTP/IPSec/L2TP (three types) or PPTP/IPSec (two ty pes) or L2TP with Policy (Nice to Have/Must) , you will see the following graphic:[...]

Vigor2850 Series User’s Guide 201 z When you check IPSec , you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. User Name This field is used to authenticate for connection when you select PPTP or L2TP with or[...]

Vigor2850 Series User’s Guide 202 3. After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Available settings are explained as follows: Item Description Go to the VPN Connec[...]

Vigor2850 Series User’s Guide 203 3 3 . . 1 1 0 0 . . 4 4 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VP N connections, such as PPTP, L2TP, L2TP over IPSec. Available settings are explained as follows: Item Description Dial-In PPP Authentication PAP Only - elect this option to force the rou[...]

Vigor2850 Series User’s Guide 204 Mutual Authentication (PAP) The Mutual Authentication function is mainly used to communicate with other routers or clients who need bi-directional authentication in order to provide stronger security, for example, Cisco routers. So you should enable this function when your peer router requires mutual authenticati[...]

Vigor2850 Series User’s Guide 205 Available settings are explained as follows: Item Description IKE Authentication Method This usually applies to those are rem ote dial-in user or node (LAN-to-LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel. Pre-Shared Key - Currently only suppor t Pre[...]

Vigor2850 Series User’s Guide 206 3 3 . . 1 1 0 0 . . 6 6 I I P P S S e e c c P P e e e e r r I I d d e e n n t t i i t t y y To use digital certificate for p eer authentication in either LAN-to-LAN connection or Remote User Dial-In connection, here you may edit a table of peer certificate for selectio n. As shown below, the router provides 32 en[...]

Vigor2850 Series User’s Guide 207 Available settings are explained as follows: Item Description Profile Name Type the name of the profile. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field [...]

Vigor2850 Series User’s Guide 208 3 3 . . 1 1 0 0 . . 7 7 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via VPN connecti on. You may set parameters including specified connection peer ID, connection type [...]

Vigor2850 Series User’s Guide 209 Available settings are explained as follows: Item Description User account and Authentication Enable this account - Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 se[...]

Vigor2850 Series User’s Guide 210 z Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection. z Must - Specify the IPSec policy to be definitely applied on the L2TP connection. Specify Remote Node - You can specify the IP address of the remote dial-[...]

Vigor2850 Series User’s Guide 211 Profiles set in the VPN and Remote Access >>IPSec Peer Identity. IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy when you specify the remote node. Check the Medium, DES, 3DES or AES box as the security method. Medium-Authentication Header (AH) means data wil[...]

Vigor2850 Series User’s Guide 212 3 3 . . 1 1 0 0 . . 8 8 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including specified c onnection direction (dial-in or dial-out), connection peer ID, connection type (VPN c onnection - including P PTP, IPSec Tu[...]

Vigor2850 Series User’s Guide 213 Available settings are explained as follows: Item Description Common Settings Profile Name – Specify a name for the profile of the LAN-to-LAN connection. Enable this profile - Check here to activate this profile. VPN Dial-Out Through - Use the drop down menu to choose a proper WAN interface for this profile. Th[...]

Vigor2850 Series User’s Guide 214 WAN1 /WAN2 /WAN3 Only - While connecting, the router will use WAN1 /WAN2 /WAN3 as the only channel for VPN connection. Netbios Naming Packet z Pass – click it to have an inquiry for data transm ission between the hosts located on both sides of VPN Tunnel while connecting. z Block – When there is conflict occu[...]

Vigor2850 Series User’s Guide 215 authentication of remote server. IPSec Tunnel - Build an IPSec VPN connection to the server through Internet. L2TP with IPSec Policy - Build a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: z None: Do not apply the IPSec policy. Accordingly, the VPN co[...]

Vigor2850 Series User’s Guide 216 scheme. z 3DES with Authentication- Use triple DES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. z AES without Authentication -Use AES encryp tion algorithm and not apply any authentication scheme. z AES with Authentication- Use AES encryption algorithm and apply MD5 or SHA-1 authenticatio[...]

Vigor2850 Series User’s Guide 217 47 characters. Callback Function (CBCP) - (for s models only) The callback function provides a callback service as a part of PPP suite only for the ISDN dial-in user. The router owner will be charged the connection fee by the telecom. Require Remote to Callback- Enable this to let the router to require the remote[...]

Vigor2850 Series User’s Guide 218 z IPSec Tunnel- Allow the remote dial-in user to trigger an IPSec VPN connection through Internet. z L2TP with IPSec Policy - Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below:  None - Do not apply the IPSec polic[...]

Vigor2850 Series User’s Guide 219 z High- Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. The callback function provides a callback service only for the ISDN LAN-to-LAN connection (this feature is use[...]

Vigor2850 Series User’s Guide 220 address here. Do not change the default value if you do not select PPTP or L2TP. Remote Network IP/ Remote Network Mask - Add a static route to direct all traffic destined to this Remote Network IP Address/Remote Network Mask through the VPN connection. For IPSec, this is the destination clients IDs of phase 2 qu[...]

Vigor2850 Series User’s Guide 221 ¾ V PN TRUNK-VPN Backup mechanism is compliant with all WAN modes (single/multi) ¾ Dial-out connection types contain IPSec, PPTP, L2TP, L2TP over IPSec and ISDN (depends on hardware specification) ¾ The web page is simple to understand and easy to configure ¾ Filly compliant with VPN Server LAN Sit Single/Mul[...]

Vigor2850 Series User’s Guide 222 Available settings are explained as follows: Item Description Backup Profile List Set to Factory Default - Click to clear all VPN TRUNK-VPN Backup mechanism profile. No – The order of VPN TRUNK-VPN Backup mechanism profile. Status - “v” means such profile is enabled; “x” means such profile is disabled. [...]

Vigor2850 Series User’s Guide 223 IPSec, PPTP, L2TP, L2TP over IPSec (NICE), L2TP over IPSec(MUST) and so on. Member2 - Display the dial-out profile selected from the Member2 drop down list below. Advanced – This button is available only when LAN to LAN profile (or more) is created. Detailed information for this dialog, see later section - Adva[...]

Vigor2850 Series User’s Guide 224 Detailed information for this dialog, see later section - Advanced Load Balance and Backup . General Setup Status - After choosing one of the profi le listed above, please click Enable to activate this profile. If you click Disable , the selected or current used VPN TRUNK-Backup/Load Balance mechanism profile wil[...]

Vigor2850 Series User’s Guide 225 (Enable or Disable), profile name, member1 or member2. Delete - Click this button to delete the selected VPN TRUNK profile. The corresponding members (LAN-to-LAN profiles) grouped in the deleted VPN TRUNK profile will be released and that profiles in LAN-to-LAN will be displayed in black. T T i i m m e e f f o o [...]

Vigor2850 Series User’s Guide 226 Balance mechanism profile, the selected LAN-to-LAN profiles will be released and expressed in black. H H o o w w c c a a n n y y o o u u s s e e t t a a G G R R E E o o v v e e r r I I P P S S e e c c p p r r o o f f i i l l e e ? ? 1. Please go to LAN to LAN to set a profile with IPSec. 2. If the router will be [...]

Vigor2850 Series User’s Guide 227 A A d d v v a a n n c c e e d d L L o o a a d d B B a a l l a a n n c c e e a a n n d d B B a a c c k k u u p p After setting profiles for load balance, you can choose any one of t hem and click Advance for more detailed configuration. The windows for advanced load balance and backup are different. Refer to the f[...]

Vigor2850 Series User’s Guide 228 99:1). VPN Load Balance Policy Below shows the algorithm for Load Balance. Edit – Click this radio button for assign a blank table for configuring Binding Tunnel. Insert after – Click this radio button to adding a new binding tunnel table. Tunnel Bind Table Index - 128 Binding tunnel tables are provided by th[...]

Vigor2850 Series User’s Guide 229 policy for load balance: Note : To configure a successful binding tunnel, you have to: Type Binding Src IP range (Start and End) and Binding Des IP range (Start and End). Choose TCP/UDP, IGMP/ICMP or Other as Binding Protocol. Detailed Settings for Advanced Backup Available settings are explained as follows: Item[...]

Vigor2850 Series User’s Guide 230 Recovers Detection. 3 3 . . 1 1 0 0 . . 1 1 0 0 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You m ay also aggressively Dial-out by using Dial-out Tool and click[...]

Vigor2850 Series User’s Guide 231 Refresh - Click this button to refresh the whole connection status. 3 3 . . 1 1 1 1 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name , a [...]

Vigor2850 Series User’s Guide 232 Type in all the information that the window requests. Then click Generate again. Import Click this button to import a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After [...]

Vigor2850 Series User’s Guide 233 3 3 . . 1 1 1 1 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. [...]

Vigor2850 Series User’s Guide 234 3 3 . . 1 1 1 1 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please typ[...]

Vigor2850 Series User’s Guide 235 z Calling via SIP Servers First, the Vigor V models of yours will have to register to a SIP Registrar by sending registration messages to validate. Then, bo th parties’ SIP proxies will forward the sequence of messages to caller to establish the session . If you both register to the same SIP Registrar, then it [...]

Vigor2850 Series User’s Guide 236 3 3 . . 1 1 2 2 . . 1 1 D D i i a a l l P P l l a a n n This page allows you to set phone book and digit map for the VoIP function. Clic k the Phone Book and Digit Map links on the page to access into next pages for dialplan settings. Available settings are explained as follows: Item Description Enable Secure Pho[...]

Vigor2850 Series User’s Guide 237 P P h h o o n n e e B B o o o o k k In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make calls quickly and easily by using “speed-dial” Phone Number . There are total 60 index entries in the phonebook for you to store all your friends and fam ily members’ SIP addre[...]

Vigor2850 Series User’s Guide 238 Display Name The Caller-ID that you wa nt to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots of SIP URL Address. SIP URL Enter your friend’ s SIP Address. Dial Out Account Choose one of the SIP accounts for this profile to dial out. It is usef[...]

Vigor2850 Series User’s Guide 239 Available settings are explained as follows: Item Description Enable Check this box to invoke this setting. Match Prefix It is used to match with the num ber you dialed and can be modified with the OP Number by the mode (add, strip or replace). Mode None - No action. Add - When you choose this mode, the OP number[...]

Vigor2850 Series User’s Guide 240 settings from the saved SIP accounts. Please set up one SIP account first to make this interface available. This item will be changed according to the port settings configured in VoIP>> Phone Settings . Move UP /Move Down Click the link to m ove the selected entry up or down. C C a a l l l l B B a a r r r r[...]

Vigor2850 Series User’s Guide 241 Call Direction Determine the direction for th e phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/URL or number. Specific URI/URL or Specific Number This field will be changed based on the type you se[...]

Vigor2850 Series User’s Guide 242[...]

Vigor2850 Series User’s Guide 243 For Block IP Address – this function can block incoming calls (through Phone port) com ing from IP address. Such control also can be done based on preconfigured schedules. R R e e g g i i o o n n a a l l This page allows you to process incoming or out going phone calls by regional. Default values (common used i[...]

Vigor2850 Series User’s Guide 244 Last Call Return [Out] Dial the number typed in this field to call the previous outgoing phone call again. Call Forward [All][Act] Dial the number typed in this field to forward all the incoming calls to the specified place. Call Forward [Deact] Dial the number typed in this field to release the call forward func[...]

Vigor2850 Series User’s Guide 245 P P S S T T N N S S e e t t u u p p Some emergency phone (e.g., 911) or special phone cannot be dialed out b y using VoIP and can be called out through PSTN line only. To sol v e this problem, this page allows you to set five sets of PSTN number for dialing without passing through Inter n et. Please type the numb[...]

Vigor2850 Series User’s Guide 246 Available settings are explained as follows: Item Description Index Click this link to access into next page for setting SIP account. Profile Display the profile name of the account. Domain/Realm Display the domain na me or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the[...]

Vigor2850 Series User’s Guide 247 SIP PING interval The default value is 150 (sec). It is useful for a Nortel server NAT Traversal Support. Click any index link to access into the following page for configuring SIP account . Available settings are explained as follows: Item Description Profile Name Assign a name for this profile for identif ying.[...]

Vigor2850 Series User’s Guide 248 SIP Port Set the port number for sending/receiving SIP message for building a session. The default value is 5060. Your peer must set the same value in his/her Registrar. Domain/Realm Set the domain name or IP address of the SIP Registrar server. Proxy Set domain name or IP address of SIP proxy server. By the time[...]

Vigor2850 Series User’s Guide 249 solution, you can choose this option. Call Forwarding There are four options for you to choose. Disable is to close call forwarding function. Always means all the incoming calls will be forwarded into SIP URL without any reason. Busy means the incoming calls will be forwarded into SIP URL only when the local syst[...]

Vigor2850 Series User’s Guide 250 Voice Active Detector This function can detect if the voice on both sides is active or not. If not, the router will do something to save the bandwidth for other using. Clic k On to i nvoke this function; click off to close the function.[...]

Vigor2850 Series User’s Guide 251 3 3 . . 1 1 2 2 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone settings fo r Phone 1 and Phone 2 respectively. However, it changes slightly according to different model you have. Available settings are explained as follows: Item Description Phone List Port – there[...]

Vigor2850 Series User’s Guide 252 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r P P h h o o n n e e P P o o r r t t Click the number link for Phone port, you can access into t he following page for configuring Phone settings. Available settings are explained as follows: Item Description Hotline Check the box to enabl[...]

Vigor2850 Series User’s Guide 253 connecting call will be closed automatically. T.38 Fax Function Check the bo x to enable T.38 fax function. Error Correction Mode – choose a mode for error correction. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call. During the period, the one who dial in will listen b[...]

Vigor2850 Series User’s Guide 254 Available settings are explained as follows: Item Description Region Select the proper region which you are located. The common settings of Caller ID Type , Dial tone , Ringing tone , Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User D[...]

Vigor2850 Series User’s Guide 255 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. MISC D[...]

Vigor2850 Series User’s Guide 256 z OutBand - Choose this one then the Vigor will capture the keypad number you pressed and transform it to digital form then send to the other side; the receiver will generate the tone according to the digital form it receive. This function is very useful when the network traffic congestion occurs and it still can[...]

Vigor2850 Series User’s Guide 257 Port It shows current connection status for Phone(s) and ISDN ports. Status It shows the VoIP connection status. IDLE - Indicates that the VoIP function is idle. HANG_UP - Indicates that the connection is not established (busy tone). CONNECTING - Indicates that the user is calling out. WAIT_ANS - Indicates that a[...]

Vigor2850 Series User’s Guide 258 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s This web page allows you to enable ISDN function. Available settings are explained as follows: Item Description ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local [...]

Vigor2850 Series User’s Guide 259 Router network provider should support MSN services. The router provides ten fields for MSN numbers. Note that MSN service must be acquired from your local telecom operators. By default, MSN function is disabled. If you leave the fields blank, all incoming calls will be accepted without number matching. 1-10 fiel[...]

Vigor2850 Series User’s Guide 260 dial-out function. Dialup 64Kbps allows you to use one ISDN B channel for Internet access. Dialup 128Kbps allows you to use both ISDN B channels for Internet access. Dialup BOD (for detailed information of configuration, please refer to section 3.13.4 ) stands for bandwidth-on-demand. The router will use onl y on[...]

Vigor2850 Series User’s Guide 261 Available settings are explained as follows: Item Description Common Settings Enable Dual ISPs Function - Check to enable the Dual ISPs function. Require ISP Callback (CBCP) - If your ISP supports the callback function, check this box to activate the Callback Control Protocol during the PPP negotiation. PPP/MP Se[...]

Vigor2850 Series User’s Guide 262 After entering the necessary settings and clicking OK , y ou will see Goto ISDN Diagnostic link appears on the bottom of the webpage. To have an ISDN connection, please click this link. Now, the system will guide you to click Dial ISDN . Wait for a moment after clicking the dial link. Then, a successful ISDN conn[...]

Vigor2850 Series User’s Guide 263 3 3 . . 1 1 3 3 . . 4 4 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router (onl y for the I SDN models) be remotely activated, or be able to dial up to the ISP via the ISDN in terface. Vigor routers provide this feature by allowing user to make a phone call to the router and the[...]

Vigor2850 Series User’s Guide 264 PPP Authentication - It specifies the PPP authentication method for PPP/MP connections. Normally you can set it to PAP/CHAP for better compatibility. TCP Header Compression - VJ Compression : It is used for TCP/IP protocol header compression. Normally it is set to Yes to improve bandwidth utilization. Idle Timeou[...]

Vigor2850 Series User’s Guide 265 The Vigor wireless routers are equipped with a wireless LAN interface compliant with the standard IEEE 802.11n draft 2 prot ocol . To boost its performance further, the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps *. Hence, you can finally smoothly enjoy stream[...]

Vigor2850 Series User’s Guide 266 In WPA-Personal, a pre-defined key is used for encryption during data transmission. WPA applies Temporal Key Integrity Protocol (TKIP) for data encryption while WPA2 applies AES. The WPA-Enterprise combines not only encry ption but also authentication. Since WEP has been proved vulnerable, you may consider using [...]

Vigor2850 Series User’s Guide 267 Available settings are explained as follows: Item Description Enable Wireless LAN Check the box to enable wireless functi on. Mode At present, the router can connect to 11n Only, 11g Only, Mixed (11b+11g), Mixed ( 11a +11n), Mixed (11g+11n), and Mixed (11b+11g+11n) stati ons sim ultaneously. Simply choose Mixed ([...]

Vigor2850 Series User’s Guide 268 or 5G band. Index(1-15) Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Hide SSID Check it to prevent from wireles[...]

Vigor2850 Series User’s Guide 269 is active only when both sides of Access Point and Station (in wireless client) invoke this function at the same time. That is, the wireless client must support this feature and invoke the function, too. Note: Vigor N61 wireless adapter supports this function. Therefore, you can use and install it into your PC fo[...]

Vigor2850 Series User’s Guide 270 3 3 . . 1 1 4 4 . . 3 3 S S e e c c u u r r i i t t y y This page allows you to set security with diffe rent modes for SSID 1, 2, 3 and 4 respectively. After configuring the correct settings, please click OK to save and invoke it. The default security mode is Mixed (WPA+WPA2)/PSK. Default Pre-Shared Key (PSK) is [...]

Vigor2850 Series User’s Guide 271 Mode There are several modes provided for you to choose. Note: You should also set RADIUS Server simultaneously if 802.1x mode is selected. Disable - Turn off the encryption mechanism. WEP- Accepts only WEP clients and the encryption key should be entered in WEP Key. WEP/802.1x Only - Accepts only WEP clients and[...]

Vigor2850 Series User’s Guide 272 such as 0x4142434445.) 128-Bit - For 128 bits WEP key, either 13 ASCII characters, such as ABCDEFGHIJ KLM (or 26 hexadecimal digits leading by 0x, such as 0x4142434445464 748494A4B4C4D). All wireless devices must support the same WEP encr yption bit size and have the same key . Four keys can be entered here, but [...]

Vigor2850 Series User’s Guide 273 (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN. For example, they can be grouped under SSID 1 and SSID 2 at the same time if you check SSID 1 and SSID 2. MAC Address Filter Display all MAC addresses that are edited before. Client’s MAC Address Manually enter the MAC a[...]

Vigor2850 Series User’s Guide 274 z On the side of Vigor 2850 series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card. z If you want to use PIN code, you have to know the PIN [...]

Vigor2850 Series User’s Guide 275 Below shows Wireless LAN>>WPS web page. Available settings are explained as follows: Item Description Enable WPS Check this box to enable WPS setting. WPS Status Display related system information for WPS. If the wireless security (encryption) function of the router is properly configured, you can see ‘Co[...]

Vigor2850 Series User’s Guide 276 3 3 . . 1 1 4 4 . . 6 6 W W D D S S WDS means Wireless Distribution System. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge traffic between two LANs through the air. y Extend the coverage range of a WLAN. To meet the above [...]

Vigor2850 Series User’s Guide 277 Bridge mode, packets received from a WDS link will only be for warded to local wired or wireless hosts. In other words, only Repeater mode can do WDS-to-WDS packet forwarding. In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, [...]

Vigor2850 Series User’s Guide 278 Item Description Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Security There are three ty pes for security, Disable , WEP and Pre-shared key . The setting you choose here w[...]

Vigor2850 Series User’s Guide 279 3 3 . . 1 1 4 4 . . 7 7 A A d d v v a a n n c c e e d d S S e e t t t t i i n n g g This page allows users to set advanced se ttings such as operation mode, channel bandwidth, guard interval, and aggregation MSDU for wireless data transmission. Available settings are explained as follows: Item Description Operati[...]

Vigor2850 Series User’s Guide 280 3 3 . . 1 1 4 4 . . 8 8 W W M M M M C C o o n n f f i i g g u u r r a a t t i i o o n n WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access categories derived from 802.1d (prioritization tabs). T he categories are designed with specific types of traffic, voice, video, best e[...]

Vigor2850 Series User’s Guide 281 categories must be smaller; however, the difference between AC_BE and AC_BK categories must be greater. Txop It means transmission opportunity. For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission, please set greater value for them to get highest transmission opportunity. Specify[...]

Vigor2850 Series User’s Guide 282 Available settings are explained as follows: Item Description Scan It is used to discover all the connected AP. The results will be shown on the box above this button. Statistics It displa y s the statistics for the channels used by APs. Add to If you want the found AP applying the WDS settings, please type in th[...]

Vigor2850 Series User’s Guide 283 Available settings are explained as follows: Item Description Refresh Click this button to refresh the status of station list. Add Click this button to add current typed MAC address into Access Control. 3 3 . . 1 1 4 4 . . 1 1 1 1 W W e e b b P P o o r r t t a a l l L L o o g g - - i i n n This page allows you to[...]

Vigor2850 Series User’s Guide 284 Available settings are explained as follows: Item Description Disable Click this button to close this function. Redirect to URL Any user who wants to access in to Internet through this router will be redirected to the URL specified here first. It is a useful method for the purpose of advertisement. For example, f[...]

Vigor2850 Series User’s Guide 285 3 3 . . 1 1 5 5 . . 1 1 U U S S B B G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s This page will determine the number of concu rrent FT P connection, default charset for FTP server and enable Samba service. At present, the Vigor router can support USB storage disk with formats of FAT16 and FAT32 onl[...]

Vigor2850 Series User’s Guide 286 LAN And WAN - Both LAN and WAN users can access samba server of the router. NetBios Name Service For the NetBios service of USB storage disk, you have to specify a workgroup name and a host name. A workgroup name must not be the same as the host name. The workgroup name can have as many as 15 characters and the h[...]

Vigor2850 Series User’s Guide 287 Click index number to access into configuration page. Available settings are explained as follows: Item Description FTP/Samba User Enable – Click this button to activate this profile (account) for FTP service or Samba User service. Later, the user can use the username specified in this page to login into FTP se[...]

Vigor2850 Series User’s Guide 288 You can click to open the following dialog to add any new folder which can be specified as the Home Folder. Access Rule It determines the authority for such profile. Any user, who uses such profile for accessing into USB storage disk, must follow the rule specified here. File – Check the items (Read, Write and [...]

Vigor2850 Series User’s Guide 289 3 3 . . 1 1 5 5 . . 3 3 F F i i l l e e E E x x p p l l o o r r e e r r File Explorer offers an easy way for users to view and manage the content of USB storage disk connected on Vigor router. Available settings are explained as follows: Item Description Refresh Click this icon to refresh files list. Back Click t[...]

Vigor2850 Series User’s Guide 290 Item Description Connection Status If there is no USB storage disk connected to Vigor router, “ No Disk Connected ” will be shown here. Disk Capacity It displays the total capacit y of the USB storage disk. Free Capacity It displays the free space of the USB storage disk. Click Refresh at any time to get new [...]

Vigor2850 Series User’s Guide 291 Stop record when fulls – when the capacity of syslog is full, the system will stop recording. Always record the new event – only the newest events will be recorded by the system. Time Display the time of the event occurred. Message Display the information for each event. F F o o r r U U S S B B S S y y s s l [...]

Vigor2850 Series User’s Guide 292 3 3 . . 1 1 6 6 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items fo[...]

Vigor2850 Series User’s Guide 293 LAN MAC Address - Display the MAC address of the LAN Interface. IP Address - Display the IP address of the LAN interface. Subnet Mask - Display the subnet mask address of the LAN interface. DHCP Server - Display the current status of DHCP server of the LAN interface DNS - Display the assigned IP address of the pr[...]

Vigor2850 Series User’s Guide 294 Available settings are explained as follows: Item Description ACS Server On Choose the interface for the router connecting to ACS server. ACS Server URL/Username/Passwor d – Such data must be typed according to the ACS (Auto Configuration Server) you want to link. Please refer to Auto Configuration Server user?[...]

Vigor2850 Series User’s Guide 295 relational settings listed below: Server IP – Type the IP address of the STUN server. Server Port – Type the port number of the STUN server. Minimum Keep Alive Period – If STUN is enabled, the CPE must send binding request to the server for the purpose of maintaining the binding in the Gateway. Please type [...]

Vigor2850 Series User’s Guide 296 3 3 . . 1 1 6 6 . . 4 4 U U s s e e r r P P a a s s s s w w o o r r d d This page allows you to set ne w password for user operation. Available settings are explained as follows: Item Description Enable User Mode for simple web configuration After checking this box, you can access into the web configurator with t[...]

Vigor2850 Series User’s Guide 297 3 3 . . 1 1 6 6 . . 6 6 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u p p B B a a c c k k u u p p t t h h e e C C o o n n f f i i g g u u r r a a t t i i o o n n Follow the steps below to backup your configuration . 1. Go to System Maintenance >> Configuration Backup . The followin[...]

Vigor2850 Series User’s Guide 298 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating examples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available. Note: Backup for Certifi[...]

Vigor2850 Series User’s Guide 299 3 3 . . 1 1 6 6 . . 7 7 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow debug equipm ents. Available settings are explained as follows: Item Description Sys[...]

Vigor2850 Series User’s Guide 300 Syslog. AlertLog Setup Check “ Enable ” to activate function of alert log. AlertLog Port - Type the port number for alert log. The default setting is 514. Mail Alert Setup Check “ Enable ” to activate function of mail alert. Send a test e-mail - Make a simple test for the e-mail address specified in this [...]

Vigor2850 Series User’s Guide 301[...]

Vigor2850 Series User’s Guide 302 3 3 . . 1 1 6 6 . . 8 8 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Available settings are explained as follows: Item Description Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to us[...]

Vigor2850 Series User’s Guide 303 3 3 . . 1 1 6 6 . . 9 9 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session. The management pages [...]

Vigor2850 Series User’s Guide 304 Management Port Setup User Defined Ports - Check to specify user-defined port numbers for the Telnet, HTTP and FTP servers. Default Ports - Check to use standard port numbers for the Telnet and HTTP servers. Enable SNMP Agent - Check it to enable this function. Get Community - Set the name for getting community b[...]

Vigor2850 Series User’s Guide 305 login from a specific host or network defined in the list. A maximum of three IPs/subnet masks is allowed. IPv6 Address /Prefix Length - Indicate the IP address(es) allowed to login to the router. 3 3 . . 1 1 6 6 . . 1 1 0 0 R R e e b b o o o o t t S S y y s s t t e e m m The Web Configurator may be used to resta[...]

Vigor2850 Series User’s Guide 306 3 3 . . 1 1 6 6 . . 1 1 1 1 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to install the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this[...]

Vigor2850 Series User’s Guide 307 3 3 . . 1 1 6 6 . . 1 1 2 2 A A c c t t i i v v a a t t i i o o n n There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via System Maintenance>>Activation . After you have finished the setting profiles for WCF (refer to[...]

Vigor2850 Series User’s Guide 308 Below shows the successful activation of Web Content Filter:[...]

Vigor2850 Series User’s Guide 309 3 3 . . 1 1 7 7 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. 3 3 . . 1 1 7 7 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r i i n n g g Click Diagnostics and c[...]

Vigor2850 Series User’s Guide 310 3 3 . . 1 1 7 7 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. 3 3 . . 1 1 7 7 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Cl[...]

Vigor2850 Series User’s Guide 311 Available settings are explained as follows: Item Description Refresh Click it to reload the page. 3 3 . . 1 1 7 7 . . 4 4 I I P P v v 6 6 N N e e i i g g h h b b o o u u r r T T a a b b l l e e The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is h[...]

Vigor2850 Series User’s Guide 312 3 3 . . 1 1 7 7 . . 5 5 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Available settings are explained as [...]

Vigor2850 Series User’s Guide 313 3 3 . . 1 1 7 7 . . 6 6 N N A A T T S S e e s s s s i i o o n n s s T T a a b b l l e e Click Diagnostics and click NAT Sessions Table to open the list page. Available settings are explained as follows: Item Description Private IP:Port It indicates the source IP address and port of local PC. #Pseudo Port It indic[...]

Vigor2850 Series User’s Guide 314 3 3 . . 1 1 7 7 . . 7 7 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Available settings are explained as follows: Item Description IPV4 /IPV6 Choose the interface for such function. Ping through Use the drop down list to c hoose the WAN interf[...]

Vigor2850 Series User’s Guide 315 want to ping. IP Address Type the IP address of the Host/IP that you want to ping. Ping IPv6 Address Type the IPv6 address that you want to ping. Run Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to remove the result on the window. 3 3 . . 1 1 7 7 . . [...]

Vigor2850 Series User’s Guide 316 Available settings are explained as follows: Item Description Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh this page man[...]

Vigor2850 Series User’s Guide 317 3 3 . . 1 1 7 7 . . 9 9 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1/WAN2/WAN3 Bandwidth, Sessions, daily or weekly for viewing different traffic graph. Click Refresh to renew the graph at any time. The horizontal axis represents time. [...]

Vigor2850 Series User’s Guide 318 3 3 . . 1 1 7 7 . . 1 1 0 0 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run . The result of route trace will be shown on the scree[...]

Vigor2850 Series User’s Guide 319 it. Trace through Use the drop down list to choose the interface that you want to ping through. Protocol Use the drop down list to choose the protocol that you want to ping through. Host/IP Address It indicates the IP address of the host. Trace Host/IP Address It indicates the IPv6 address of the host. Run Click [...]

Vigor2850 Series User’s Guide 320 3 3 . . 1 1 7 7 . . 1 1 1 1 W W e e b b F F i i r r e e w w a a l l l l S S y y s s l l o o g g Such page provides real-time syslog and displays the information on the screen. F F o o r r W W e e b b S S y y s s l l o o g g This page displays the time and message fo r User/Firewall/call/WAN/VPN settings. You can [...]

Vigor2850 Series User’s Guide 321 F F o o r r U U S S B B S S y y s s l l o o g g This page displays the syslog recorded on the USB storage disk. Available settings are explained as follows: Item Description Time Display the time of the event occurred. Log Type Display the type of the record. Message Display the information for each event. 3 3 . [...]

Vigor2850 Series User’s Guide 322 3 3 . . 1 1 8 8 E E x x t t e e r r n n a a l l D D e e v v i i c c e e s s This page allows you to enable or disable the function of detecting external devices. Available settings are explained as follows: Item Description External Device Auto Discovery Check this box to detect the external device automatically [...]

Vigor2850 Series User’s Guide 323 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 H H o o w w t t o o c c o o n n f f i i g g u u r r e e s s e e t t t t i i n n g g s s f f o o r r I I P P v v 6 6 S S e e r r v v i i c c e e i i n n V V i i g g o o r r 2 2 8 8 5 5 0 0 Due to the shortage of IPv[...]

Vigor2850 Series User’s Guide 324 Note: Only one WAN interface support IPv6 service at one time. In this example, WAN2 is chosen as the one supporting IPv6 service. 2. In the following figure, use the drop down list to cho ose a proper connection type. Different connection types will bring out di fferent configuration page. Refer to the following[...]

Vigor2850 Series User’s Guide 325 Click OK and open Online Status . If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time.[...]

Vigor2850 Series User’s Guide 326 z TSPC – Tunnel application, both IPv6 hosts communicate through IPv4 network Choose TSPC and type the information for TSPC service. Note: While using such mode, you have to ma ke sure the IPv4 network connection is normal. (In the following figure, the TSPC inform ation is obtained from http://gogo6.com/ after[...]

Vigor2850 Series User’s Guide 327 z AICCU – Tunnel application Choose AICCU and type the information for AICCU of IPv6. Note: While using such mode, you have to ma ke sure the IPv4 network connection is normal. (In the following figure, the AICC U information is obtained from https://www.sixxs.net/main/ after applied for the service.) Click OK [...]

Vigor2850 Series User’s Guide 328 z DHCPv6 Client Choose DHCPv6 Client. Click one of the identity associations and type the IAID number. Click OK and open Online Status . If the connection is successful, the physical connection will be shows as follows:[...]

Vigor2850 Series User’s Guide 329 z Static IPv6 Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address. Click OK and open Online Status . If the connection is successful, the physical connection will be shows as follows:[...]

Vigor2850 Series User’s Guide 330 I I I I . . C C o o n n f f i i g g u u r r i i n n g g t t h h e e L L A A N N S S e e t t t t i i n n g g s s After finished the WAN settings for IPv6, pl ease configure the LAN settings to make the router’s client getting the IPv6 address. 1. Access into the web configurator of Viogr2850. Open LAN >> G[...]

Vigor2850 Series User’s Guide 331 I I I I I I . . C C o o n n f f i i r r m m i i n n g g I I P P v v 6 6 S S e e r r v v i i c c e e R R u u n n S S u u c c c c e e s s s s f f u u l l l l y y 1. Make sure you have get the correct IPv6 IP address. Get into MS-DOS interface and type the command of “ipconfig”. Refer to the following figure. Fr[...]

Vigor2850 Series User’s Guide 332 3. Connect to the website for IPv6. Open a web browser and type an URL of IPv6, e.g., www.kame.net . If your computer accesses into th e website by using IPv6 address, you may see a turtle dancing on the screen. If not, only a steady turtle will be seen. If you can see a turtle dancing on the screen, that means I[...]

Vigor2850 Series User’s Guide 333 4 4 . . 2 2 H H o o w w c c a a n n I I g g e e t t t t h h e e f f i i l l e e s s f f r r o o m m U U S S B B s s t t o o r r a a g g e e d d e e v v i i c c e e c c o o n n n n e e c c t t i i n n g g t t o o V V i i g g o o r r r r o o u u t t e e r r ? ? Files on USB storage device can be reviewed by opening[...]

Vigor2850 Series User’s Guide 334 4. Click OK to save the configuration. 5. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1 . Use the account " user1 " to login.[...]

Vigor2850 Series User’s Guide 335 6. When the following screen appears, it means the FTP service is running properly. 7. Return to USB Application >> USB Disk Status . The information for FTP server will be shown as below. Now, users in LAN of Vigor2710 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They [...]

Vigor2850 Series User’s Guide 336 4 4 . . 3 3 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d q q u u a a r r t t e e r r The most common case is that you may want to connect to networ[...]

Vigor2850 Series User’s Guide 337 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection.[...]

Vigor2850 Series User’s Guide 338 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based serv[...]

Vigor2850 Series User’s Guide 339 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined i[...]

Vigor2850 Series User’s Guide 340 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: 1. Go to VPN and Remote Access and select Remote Access Cont rol to enable the necessary VPN[...]

Vigor2850 Series User’s Guide 341 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dia[...]

Vigor2850 Series User’s Guide 342 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service is selected, y [...]

Vigor2850 Series User’s Guide 343 If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. 7. At last, set the re mote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router [...]

Vigor2850 Series User’s Guide 344 4 4 . . 4 4 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

Vigor2850 Series User’s Guide 345 3. Go to Remote Dial-In User . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security [...]

Vigor2850 Series User’s Guide 346 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router. For Win2000/XP, plea[...]

Vigor2850 Series User’s Guide 347 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router. If a PPP-based service is selected, you should fu rther specify the remote VPN server IP address, Username, Password, and[...]

Vigor2850 Series User’s Guide 348 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 5 5 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he woul[...]

Vigor2850 Series User’s Guide 349 3. Set Inbound/Outbound ba ndwidth. Note: The rate of outbound/inbound m ust be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to se t the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. 4. Return t[...]

Vigor2850 Series User’s Guide 350 5. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP . 6. Return to previous page. Enter th e Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS . And click OK . 7. Click Setup link for W AN2.[...]

Vigor2850 Series User’s Guide 351 8. Check Enable UDP Band width Control on t he bottom to prevent enormous UDP traffic of influent other application. Click OK . 9. If the worker has connected to the headquart er using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m ay set up an index for it. Enter the Class [...]

Vigor2850 Series User’s Guide 352 11. Click Add to open the following window . Check the ACT box, first. 12. Then click Edit of Local Addr ess to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s IP address. Leave other fields and click OK .[...]

Vigor2850 Series User’s Guide 353 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r U U s s i i n n g g F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e U U t t i i l l i i t t y y Before upgrading your router firmware, you need to install the Router Tools. The F[...]

Vigor2850 Series User’s Guide 354 5. Double click on the icon of router tool. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 8. Type in your router IP, usually[...]

Vigor2850 Series User’s Guide 355 10. Click Send . 11. Now the firmware update is finished. U U s s i i n n g g W W e e b b P P a a g g e e The web page also can guide you to upgrade firm ware. Note that this example is running over Windows OS (Operating System). 1. Download the newest firmware from DrayTe k's web site or FTP site. The DrayT[...]

Vigor2850 Series User’s Guide 356 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Go to Certificate Management and choose Local Certificate .[...]

Vigor2850 Series User’s Guide 357 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. 4. Connect to CA server via web browser. Follo w the instruction to submit the request. Below we t[...]

Vigor2850 Series User’s Guide 358 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below. Then you have done the request and the ser ver[...]

Vigor2850 Series User’s Guide 359 5. Back to Vigor router, go to Local Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh and you will find the below window showin g “------BEGINE CERTIFICATE------.....” 6. You may review the detail informati on of the ce[...]

Vigor2850 Series User’s Guide 360 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA cert[...]

Vigor2850 Series User’s Guide 361 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) in to Vigor router. When finished, click refre[...]

Vigor2850 Series User’s Guide 362 4 4 . . 9 9 C C r r e e a a t t i i n n g g a a n n A A c c c c o o u u n n t t f f o o r r M M y y V V i i g g o o r r The website of MyVigor (a server located on http://myvigor.draytek.com ) prov ides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web [...]

Vigor2850 Series User’s Guide 363 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now . 4. Check to confirm that you accept the Agreement and click Accept .[...]

Vigor2850 Series User’s Guide 364 5. Type your personal information in this page and then click Continue . 6. Choose proper selection for your computer and click Continue .[...]

Vigor2850 Series User’s Guide 365 7. Now you have created an account successfully. Click START. 8. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the re gister[...]

Vigor2850 Series User’s Guide 366 10. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . 11. Now, click Login . Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 4 4 . . 9 9 . . 2 2 C C r r e [...]

Vigor2850 Series User’s Guide 367 2. Check to confirm that you accept the Agreement and click Accept . 3. Type your personal information in this page and then click Continue . 4. Choose proper selection for your computer and click Continue .[...]

Vigor2850 Series User’s Guide 368 5. Now you have created an account successfully. Click START. 6. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the re gister[...]

Vigor2850 Series User’s Guide 369 8. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login . Your account has been activated. You can access into [...]

Vigor2850 Series User’s Guide 370 This page is left blank.[...]

Vigor2850 Series User’s Guide 371 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the we b configuration. Please follow sections below to check your basic installation status stage by stage. z Chec[...]

Vigor2850 Series User’s Guide 372 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong netw or[...]

Vigor2850 Series User’s Guide 373 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O S S 1. Double click on the current used Mac OS on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configu[...]

Vigor2850 Series User’s Guide 374 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most import[...]

Vigor2850 Series User’s Guide 375 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Open WAN >> Internet Access page and then check whether the ISP settings are set correctly. Click Details Page of WAN1/WAN2 to review the settings that you conf[...]

Vigor2850 Series User’s Guide 376 T T r r a a n n s s m m i i s s s s i i o o n n R R a a t t e e i i s s n n o o t t f f a a s s t t e e n n o o u u g g h h Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor2850. In addition, please refer to the manual of 3G USB Modem for LED S[...]

Vigor2850 Series User’s Guide 377 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the f[...]