Draytek Vigor 2200 manual

0. Preface ..................................................................... 0-1 0.1 About This Manual ........................................... 0-2 0.2 Copyright Declarations .................................. 0-2 0.3 T rademarks ........................................................ 0-2 0.4 How T o Become A Registered Owner ........ 0-2 0[...]

2.5 Using the Web Configurator .......................... 2-18 3. Basic Setup & Internet Access .................. 3-1 3.1 Basic Setup .......................................................... 3-2 3.2 Internet Access Setup ....................................... 3-7 3.3 ISDN Dial-up Internet Access ......................... 3-9 3.4 DSL/Cable M[...]

6. Virtual T A Application .................................... 6-1 6.1 Virtual T A Concepts ............................................ 6-2 6.2 Installing a V irtual T A Client .............................. 6-3 6.3 Configuring a Virtual T A Client/Server ........... 6-4 7. System Management ...................................... 7-1 7.1 Online S[...]

0-1 0 Preface 0.1 About This Manual 0.2 Copyright Declarations 0.3 T rademarks 0.4 How T o Become A Registered Owner 0.5 Safety Instructions 0.6 W arranty 0.7 European Community Declarations[...]

0-2 Preface 0.1 About This Manual This manual is designed to assist users in using the DrayT ek Vigor2200 series router , including the Vigor2200, V igor2200X and Vigor2200E. Information in this document has been care- fully checked for accuracy; however , no guarantee is given as to the correctness of the contents. The information contained in thi[...]

0-3 Pr eface 0.5 Safety Instructions • Please read the installation guide thoroughly before you set up the router . • The router can be used only with a BRI (Basic Rate Interface) ISDN line, except for the Vigor2200E model. • The router is a complicated electronic unit that may be re- paired only be authorized and qualified personnel. Do not [...]

0-4 Preface store the product to proper operating condition. Any replace- ment will consist of a new or re-manufactured functionally equiva- lent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modi- fied, misused, tampered with, damaged by an act of God, or subjected to abnormal [...]

1-1 1 Getting Started 1.1 Introduction 1.2 Vigor2200 Series Router Comparisons 1.3 Unpacking Y our Vigor2200 Series Router 1.4 LED Indicators & Rear Panels 1.5 Key Features[...]

1-2 Getting Started 1.1 Introduction The Vigor2200 series of routers is composed of the Vigor2200, the Vigor2200X, and the V igor2200E. The V igor2200E has no ISDN BRI interface. Therefore, no ISDN functions are available for the Vigor2200E and parts of this manual referring to such functions will not apply to the Vigor2200E. From a technical point[...]

1-3 Getting Started 1.2 Vigor2200 Series Router Comparisons s l e d o M s m e t I0 0 2 2 r o g i VX 0 0 2 2 r o g i VE 0 0 2 2 r o g i V I R B N D S Is e Ys e Yo N 1 N A LX T - e s a B 0 0 1 / 0 1 * 1X T - e s a B 0 0 1 / 0 1 * 4X T - e s a B 0 0 1 / 0 1 * 4 ) N A W ( 2 N A LT - e s a B 0 1T - e s a B 0 1T - e s a B 0 1 s s e c c A d n a b d a o [...]

1-4 Getting Started 1.3 Unpacking Y our Vigor2200 Series Router Y our Vigor2200 series router package should contain the items listed below . If any item is missing or damaged, contact your dealer or DrayT ek Customer Service Department immediately . • One User manual with warranty/registration card • One CD-ROM; includes User Manual in electro[...]

1-5 Getting Started 1.4 LED Indicators & Rear Panels Each of the Vigor2200 series front and rear panel are different. The following sections describe the models individually . Vigor2200: LED Indicators There are eleven LEDs on the front panel; ACT , LNK, B1, B2, LNK, 100M, FDX, Broadband, LNK, TX, and Col. ACT (Activity) Blinks when power is su[...]

1-6 Getting Started Note: On some NT-1 boxes, the ISDN LNK LED will go OFF when the ISDN line has been idle for a while. When the router is dialling or answering a call, it should be ON again. B1 ON when there is a successful remote connection on the ISDN BRI B1 channel. B2 ON when there is a successful remote connection on the ISDN BRI B2 channel.[...]

1-7 Getting Started TX (Transmit) Blinks when the LAN2(WAN) port transmits data. Col (Collision) ON when there are collisions occurring on the LAN2(WAN) port. Rear Panel Description The Vigor2200 has a reset button, a power jack, and five RJ-45 ports on the rear panel: PWR Only the DrayT ek supplied power adapter should be connected to the power ja[...]

1-8 Getting Started Vigor2200X: LED Indicators As shown above, there are 1 1 LEDs on the front panel. Reading from left to right, they are marked ACT , LNK, B1, B2, Backup, W AN, Broadband, P1, P2, P3 and P4. Their functions are as follows: ACT (Activity) Blinks when power is supplied to the router and the router software is running normally . ISDN[...]

1-9 Getting Started B1 ON when there is a successful remote connection on the ISDN BRI B1 channel. B2 ON when there is a successful remote connection on the ISDN BRI B2 channel. Backup ON when ISDN backup dial is active. W AN Group: WA N ON when the WAN port is connected. Broadband ON when broadband access is active. P1, P2, P3, P4 These indicators[...]

1-10 Getting Started Reset For upgrading the firmware: Press the button and hold, then power ON. The ACT and LNK LEDs will blink simultaneously (see section 7.5). T o restore default settings: While the device is running, press the button and hold for more than five seconds. When the ACT LED be- gins to blink rapidly , release the Reset button. The[...]

1-11 Getting Started Vigor2200E: LED Indicators As shown above, there are 1 1 LEDs, reading from left to right, they are ACT , four bandwidth utilization bar LEDs for the WAN port, W AN, Broadband, P1, P2, P3 and P4. Most of the LEDs are the same as those of the Vigor2200X, except for the additional Bandwidth Utilization LEDs for the W AN port. The[...]

1-12 Getting Started 1.5 Key Features The Vigor2200 Routers provide many built-in server and software fea- tures to provide a convenient comprehensive solution for your SOHO network. 1. Network Address T ranslation (NA T) : NA T allows multiple SOHO users to concurrently connect to an Internet Service Provider (ISP) using a single Internet access a[...]

1-13 Getting Started 6. Routing Information Protocol (RIP) Support : Used in most LAN-to-LAN applications. The RIP protocol exchanges routing in- formation between routers. 7. Domain Name Server (DNS) Proxy : The DNS proxy maintains a DNS cache, including a mapping table of domain names and IP addresses. The proxy also remembers DNS query packets s[...]

1-14 Getting Started 13. Point-to-Point T unnelling Protocol (PPTP) Client Support : Some DSL modems (e.g. Alcatel modems), only provide a PPTP local connection for an end user computer . The Vigor2200 series routers have a built-in PPTP client for establishing a DSL link transport protocol for your entire local network. There is no need to install[...]

2-1 2 Installation & Setup 2.1 Before you Begin 2.2 Hardware Installation 2.3 Setting up a Management PC 2.4 Using the Smart Start Wizard 2.5 Using the Web Configurator[...]

2-2 Installation & Setup 2.1 Before Y ou Begin 1. Use only the power adapter supplied by DrayT ek Corp. Using an incorrectly rated power adapter will result in damage to the router . 2. Know the type of interface provided by your ISP or telcom. The standard model only supports the ISDN BRI S/T-interface. If you are an ISDN U-interface user , yo[...]

2-3 Installation & Setup Factory Default Settings: Router’s Default IP Network Settings: IP Address: 192.168.1.1 Subnet Mask: 255.255.255.0 DHCP Server: Enabled Start IP Address: 192.168.1.10 IP Pool Counts: 50 Web Configurator: Username: admin Password: <blank> Note: Blank means no password required. T elnet Console: Password: <blan[...]

2-4 Installation & Setup 2.2 Hardware Installation 2.2.1 Connecting the Power Adapter 1. Connect the power adapter to the power outlet on the wall and to the PWR power jack on the rear panel of the router . 2. The ACT LED should be blinking once every 2 seconds. 2.2.2 Connecting to the Ethernet A. Connecting to a PC: 1. Attach the Ethernet cabl[...]

2-5 Installation & Setup Ethernet hub or switch should be ON. Note: If the Ethernet cable is not long enough to reach the external hub/switch, purchase a longer straight-through 10Base-T Ethernet cable. 2.2.3 Connecting to an ISDN BRI Line (Vigor2200 and Vigor2200X only) A. S/T-Interface Model 1. Locate the ISDN cable (black color cable). 2. Pl[...]

2-6 Installation & Setup The hardware installation is now complete. The following sections will guide you through setting up your management PC and connecting to the Web Configurator . Note: The Web Configurator is a management utility that han- dles all configuration and provides web-based manage- ment. 2. Attach the Ethernet cable to the Ethe[...]

2-7 Installation & Setup 2.3 Setting Up a Management PC The router has a built-in HTTP (Web) server for configuration. Before you use the router to access the Internet, you should set up a man- agement PC to log into the router for further configuration. The man- agement PC may be configured with a fixed or dynamically assigned IP address. For [...]

2-8 Installation & Setup Y our particular system will be different from the screen shown here. Check that you have an Ethernet network card installed. If not, refer to the card manufacturers documentation and install the card and drivers. If your card is installed, 1. Click the “ Add ” button. The Select Network Component T ype dialog box w[...]

2-9 Installation & Setup 2.3.2 Configuring the TCP/IP Protocol 1. On the Network dialog box Configuration card, select TCP/IP and then click “ Properties ” . The TCP/IP Properties dialog box will open. 2. On the IP Address tab, click “ Obtain an IP address auto- matically ” . As the DHCP (Dynamic Host Configuration Proto- col) server bu[...]

2-10 Installation & Setup 4. Click the “ Gateway ” tab.[...]

2-11 Installation & Setup 5. Make the “ New gateway ” and “ Installed gateways ” fields blank and click “ OK ” . A dialog box will pop up asking you to restart the PC. Click “ Ye s ” . 2.3.3 Checking TCP/IP settings 1. After completing the previous steps, click “ Start ” -> “ Run ” -> and type “ winipcfg ” . Th[...]

2-12 Installation & Setup not, verify that the Ethernet cable is connected to the router properly and the Ethernet port LED on the front panel is lit.[...]

2-13 Installation & Setup 2.4 Using the Smart Start Wizard The Smart Start Wizard will guide you through using the Web Configurator or T elnet T erminal (command-line based management). Also, if your currently installed network is not located in the 192.168.1.x IP range, the wizard will find the router and change the router ’ s default IP add[...]

2-14 Installation & Setup The following screen will open. 2. Click “ Search ” to find the router on your network. 3. Click “ OK ” to go to the login password screen. 3. If this is a first time setup of the router , do not enter a pass- word. Click ” OK “ to go to next screen.[...]

2-15 Installation & Setup The screen shows read-only IP and IP mask settings for the PC you are using, and also the IP Address and IP Mask set- tings for the router . Here you may change the router settings to match your current network environment, or keep the default settings. 4. Click “ Next ” to update the settings to the router . 5. W [...]

2-16 Installation & Setup If the IP address and IP Mask of your PC and of the router are not located on the same subnet, renew your PC ’ s IP address, using winipcfg.exe on Windows95/98/Me,or ipconfig.exe on Windows NT/2000. When the browser is launched, the fol- lowing pop-up window will ask for a User Name and Password. Enter admin as the U[...]

2-17 Installation & Setup[...]

2-18 Installation & Setup 2.5 Using the Web Configurator 2.5.1 Connecting to the Web Configurator via a Web Browser 1. Launch the W eb browser . Enter http://192.168.1.1 into the browser Address window and press the Enter key . 2. An authentication dialog box will open. 3. If this is a first time setup of the router , type admin as the User Nam[...]

2-19 Installation & Setup 2.5.2 Overview of the Web Configurator The Setup Main Menu (see above figure) consists of four groups: Ba- sic Setup (Setup First) , Quick Setup , Advanced Setup, and Sys- tem Management . The following outlines each configuration menu. Basic Setup (Setup First): 1. Administrator Password Setup: Sets/changes the admini[...]

2-20 Installation & Setup ing settings, e.g. MSN numbers and Own (Calling) numbers. Quick Setup: 1. Internet Access Setup: (required for Internet access) Usually the router functions as a border router for SOHO or home networking so you must enter settings here to enable access to the Internet. 2. Remote Dial-In Access Setup: (Vigor2200, Vigor2[...]

2-21 Installation & Setup 2. NA T (Network Address Translation) Setup Sets NA T configurations, such as Port Redirection, DMZ etc. 3. Static Route Setup This menu has 10 routing rules for static routing usage. Here you may add/delete or activate/deactivate any static route. 4. Remote Dial-in User Setup (Vigor2200, Vigor2200X) The Vigor2200 and [...]

2-22 Installation & Setup Note: 1. Y ou should now have some basic concepts on how to setup and configure the router . The following chapters will explain each setup menu and related settings in more detail. 2. The Vigor2200E model does not have an ISDN BRI interface. Therefore, ISDN-related features and functions are not available and some set[...]

3-1 3 Basic Setup & Internet Access 3.1 Basic Setup 3.2 Internet Access Setup 3.3 ISDN Dial-up Internet Access 3.4 DSL/Cable Modem Internet Access[...]

3-2 Basic Setup & Internet Access The Web Configurator Setup Main Menu includes four groups: Basic Setup (Setup First) , Quick Setup , Advanced Setup, and System Management . This chapter explains the Basic Setup group and Internet Access Setup (which is in the Quick Setup group). 3.1 Basic Setup (Setup First) This group includes Administrator [...]

3-3 Basic Setup & Internet Access Old Password: If this is the first time to set a password, leave this field blank. New Password: Enter an administrator password. Retype New Password: T ype the password again for confirmation. Click “ OK ”. 3.1.2 Configuring LAN 1 IP Address and DHCP Server Each of the Vigor2200 series routers has two Ethe[...]

3-4 Basic Setup & Internet Access LAN 1 IP Network Configuration 1st IP Address: Private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask: Netmask for the local private network (De- fault: 255.255.255.0/24). For IP Routing Usage: (Default: Disable). Enable: Enables the 2nd IP address settings. Disable[...]

3-5 Basic Setup & Internet Access the local network. Activate: (Default: Y es). Y es: Enables the DHCP server . No: Disables the DHCP server . Start IP Address: Sets the start IP address of the IP address pool. IP Pool Counts: Sets the number of IPs in the IP address pool. DNS Server IP Address: (Default: None). DNS stands for Domain Name Syste[...]

3-6 Basic Setup & Internet Access 3.1.3 Configuring the ISDN Interface This setup page is present in the Vigor2200 and Vigor2200X, absent in the Vigro2200E. Country Code: For proper operation on your local ISDN network you should set the correct country code. Own Number: Sets your ISDN number . If the field has been configured, every outgoing c[...]

3-7 Basic Setup & Internet Access without number-matching. Click “ OK ” to return to the Main Setup Menu . 3.2 Internet Access Setup For most users, Internet access is the primary application. The Vigor2200 and V igor2200X support the ISDN W AN interface for Internet access and remote access. The following sec- tions will explain more detai[...]

3-8 Basic Setup & Internet Access do not support Multiple-Link PPP (ML-PPP). In such cases dialing to two ISPs can increase the bandwidth utilization of the ISDN line to 128kbps data speed. PPPoE: This is for most DSL modem users. All local users can share one PPPoE connection to access the Internet. PPTP: Some DSL services providers supply a s[...]

3-9 Basic Setup & Internet Access 3.3 ISDN Dialup Internet Access 3.3.1 Connecting to a Single ISP ISP Access Setup ISP Name: Enter your ISP name. Dial Number: Enter the ISDN access number provided by your ISP . Username: Enter the username provided by your ISP . Password: Enter the password provided by your ISP . Require ISP Callback (CBCP): I[...]

3-10 Basic Setup & Internet Access Link Disable Disables the ISDN dial-out function. Dialup 64Kbps Uses one ISDN B channel for Internet access. Dialup 128Kbps Uses both ISDN B channels for Internet access. Dialup BOD BOD stands for bandwidth-on-demand. The router will use only one B channel under low traffic situations. Once the single B channe[...]

3-11 Basic Setup & Internet Access check “ Ye s ” and enter the IP address in the Fixed IP Address field. Click “ OK ”. 3.3.2 Connecting to Dual ISPs Most configuration parameters are the same as that in the last sec- tion. This page provides an “ Enable Dual ISPs Function ” check box and adds a secondary ISP Setup section. Check th[...]

3-12 Basic Setup & Internet Access 3.4 DSL/Cable Modem Internet Access Before you connect a broadband access device, e.g. a DSL/Cable modem, to the router , you need to know what kind of Internet access is provided by your ISP . The following sections deal with four widely-used broadband access services. These are PPPoE Client, PPTP Client and [...]

3-13 Basic Setup & Internet Access 3.4.1 Using PPPoE with a DSL Modem[...]

3-14 Basic Setup & Internet Access Click “ Internet Access Setup ” > “ PPPoE ” to enter the setup page. PPPoE Setup PPPoE Link: Check “ Enable ” to enable the PPPoE client protocol on the LAN2 interface. ISP Access Setup ISP Name: Enter the ISP name. Username: Enter the ISP supplied username. Password: Enter the ISP supplied pass[...]

3-15 Basic Setup & Internet Access seconds. If you set the time to 0, the PPP session will not terminate itself. IP Address Assignment Method (IPCP) Fixed IP: Check “ No (Dynamic IP) ” unless your ISP has pro- vided you with a static IP address. Fixed IP Address: If your ISP has provided you with a static IP address enter it here. Click “[...]

3-16 Basic Setup & Internet Access ISP Access Setup ISP Name: Enter the ISP name. Username: Enter the ISP supplied username. Password: Enter the ISP supplied password. ISDN Dial Backup Setup This item will be described in more detail in section 3.4.5. PPP Setup PPP Authentication: Select “ P AP or CHAP ” for widest compatibility . Idle Time[...]

3-17 Basic Setup & Internet Access IP Address Assignment Method (IPCP) Fixed IP: Check “ No (Dynamic IP) ” unless your ISP has pro- vided you with a static IP address. Fixed IP Address: If your ISP has provided you with a static IP address enter it here. LAN2/W AN IP Network Settings Obtain an IP address automatically: Sets the LAN2/WAN int[...]

3-18 Basic Setup & Internet Access Click “ Internet Access Setup ” > “ Static or Dynamic IP ” to enter the setup page.[...]

3-19 Basic Setup & Internet Access Access Control Broadband Access: Select “ Enable ” to turn on the broadband access capability . ISDN DIAL Backup Setup This item will be described in more detail in section 3.4.5 LAN2/W AN IP Network Settings Specify an IP address: As we are using a static IP , you have to select the option to specify an I[...]

3-20 Basic Setup & Internet Access[...]

3-21 Basic Setup & Internet Access Access Control Broadband Access: Select “ Enable ” to turn on the broadband access capability . ISDN Dial Backup Setup This item is described in more detail in section 3.4.5 LAN2/W AN IP Network Settings Obtain an IP address automatically: The option must be enabled. Router Name: Depending on your Cable IS[...]

3-22 Basic Setup & Internet Access 3.4.5 Configuring ISDN Dial Backup As the Vigor2200E has no ISDN interface, it does not support the ISDN dial backup function. Therefore, the following setup options will not be available for this model. ISDN Dial Backup Setup Dial Backup Mode: None: Disables the backup function. Packet Trigger: The backup lin[...]

3-23 Basic Setup & Internet Access For ISDN Dial Backup to function, you must create a dial backup profile. Click “ Internet Access Setup ” > “ Dialing to a Single ISP ” to enter the backup profile setup page. Refer to section 3.3.1 for details.[...]

4-1 4 Remote Access 4.1 Introduction to Remote Access 4.2 Remote Dial-in Access 4.3 LAN-to-LAN Access[...]

4-2 Remote Access This chapter explains the capabilities of remote access on the Vigor2200 series routers. Use the following setup links on the Setup Main Menu to setup remote access functions. Quick Setup > Remote Dial-In Access Setup Advanced Setup > Remote Dial-In User Setup > LAN-to-LAN Dialer Profile Setup[...]

4-3 Remote Access 4.1 Introduction to Remote Access Here the term “Remote Access” covers two types of remote access. The first, “Remote Dial-In Access” means the router allows normal ISDN T A users or NA T routers (IP sharing routers) to dial into the router to share the network resources of the local network, or to surf the Internet via a [...]

4-4 Remote Access Dial-In Access Control Dial-In Service: Check “ Enable ” to allow dial-in service. Note that if you check “ Disable ”, the router will not accept any in- coming ISDN calls. PPP/MP Setup Dial-In PPP Authentication: P AP: Selecting this option will force the router to au- thenticate dial-in users with the P AP protocol. P AP[...]

4-5 Remote Access 4.2.2 Creating an Access Account for a Dial-in User After activating the dial-in capability , you must create an access ac- count for each dial-in user . From the Advanced Setup menu, click “ Remote Dial-In User Setup ” to open the page shown below . The router provides 10 access accounts for dial-in users. Set to Factory Defa[...]

4-6 Remote Access User Account and Authentication Check to enable the user account: Check this item to acti- vate the individual user account. Username: Specifies a username for the specific dial-in user . Password: Specifies a password for the specific dial-in user . Idle Timeout: By default, set to 300 seconds. If the dial-in user is idle for ove[...]

4-7 Remote Access The router owner will be charged the connection fee by the telecom. Check to enable the Callback function: Enables the callback function. Specify the callback number: The option is for extra secu- rity . Once enabled, the router will only call back to the speci- fied ISDN number defined in the next parameter , Callback Number . Ca[...]

4-8 Remote Access 4.3 LAN-to-LAN Access The following sections are based on the network layout above to de- scribe how to set up a LAN-to-LAN profile to connect two private net- works. In the above network layout, the private network 192.168.1.0/ 24 is located at head office, the off-site branch office’s network is 192.168.2.0/24. Before you begi[...]

4-9 Remote Access e c i f f O d a e He c i f f O h c n a r B D I k r o w t e N4 2 / 0 . 1 . 8 6 1 . 2 9 14 2 / 0 . 2 . 8 6 1 . 2 9 1 k s a m t e n / s s e r d d a P I r e t u o R4 2 / 1 . 1 . 8 6 1 . 2 9 14 2 / 1 . 2 . 8 6 1 . 2 9 1 n o i t c e n n o c n i - l a i d r o f P I d e n g i s s A0 0 2 . 1 . 8 6 1 . 2 9 10 0 2 . 2 . 8 6 1 . 2 9 1 t n u o[...]

4-10 Remote Access Because the Head Office’s network is 192.168.1.0/24, the settings should be as below: Dial-In Service: Enable Start IP Address: 192.168.1.200 Branch Office: Because the Branch Office’s network is 192.168.2.0/24, the settings should be as below: Dial-In Service: Enable Start IP Address: 192.168.2.200 4.3.2 Creating a LAN-to-LA[...]

4-11 Remote Access The router provides 16 LAN-to-LAN profiles for connecting to up to 16 different remote networks. Set to Factory Default: Clicking here will clear all the LAN-to-LAN profiles. Index: Click a number in the Index to open a detailed settings page for each profile. Name: Indicates the name of the LAN-to-LAN profile. The symbol “????[...]

4-12 Remote Access Each LAN-to-LAN profile includes 4 subgroups: Common Settings , Dial-Out Settings , Dial-In Settings , and TCP/IP Network Settings . The following will explain each subgroup in detail. Common Settings Profile Name: Specifies a name for the remote network. Enable this profile: Check here to activate this profile. Call Direction: S[...]

4-13 Remote Access means it can be used for outgoing and incoming access. Dial- Out means it can only be used for outgoing access. Dial-In allows only incoming access. Idle Timeout: By default, set to 300 seconds. If the profiles connection is idle for over the limit set by the timer , the router will drop the connection. Dial-Out Settings Username[...]

4-14 Remote Access Callback Function (CBCP) The callback function is implemented by the CBCP protocol which is part of the PPP protocol suite. Require Remote to Callback: Inactive by default. When active, the router exchanges connection information with the remote router and requires the remote router to call back to make a connection. Provide ISDN[...]

4-15 Remote Access Use Following Number to Callback & Callback Number: Check here and enter a callback number for the router to call. Callback Budget: Specifies a time budget for the callback function. By default the value is zero, which means there is no time limitation on call backs. TCP/IP Network Settings The following settings are required[...]

4-16 Remote Access Recall the LAN-to-LAN example described in section 4.3. The LAN- to-LAN Dialer Profile could be configured as below . Head Office:[...]

4-17 Remote Access Branch Office:[...]

5-1 5 Advanced Setup 5.1 Enabling the Remote Activation Function 5.2 Call Control Setup 5.3 Configuring the BOD Parameters 5.4 NA T Setup 5.5 Static Route Setup 5.6 IP Filter/Firewall Setup[...]

5-2 Advanced Setup This chapter explains the options available in Advanced Setup: Advanced Setup > Call Control and PPP/MP Setup > NA T Setup > Static Route Setup > IP Filter/Firewall Setup Note: As the Vigor2200E model does not feature an ISDN in- terface, Call Control and PPP/MP Setup will not be avail- able.[...]

5-3 Advanced Setup 5.1 Enabling the Remote Activation Function Some applications require that the router be remotely activated, or dial up to the ISP using the ISDN interface. For instance, if you are a user who accesses the Internet via ISDN from home, usually the dialup connection is idle when you are not at home. It may be that while working in [...]

5-4 Advanced Setup Specify a phone number in the Remote Activation field. If the router accepts a call from the number 12345678, it will discon- nect immediately and dial to the ISP . Note that “ Internet Access Setup ” > “ Dialling to a Single ISP ” should be preset properly . 5.2 Call Control Setup On the “ Call Control and PPP/MP Se[...]

5-5 Advanced Setup These parameters are activated when you set the Link T ype to Dialup BOD . Usually the ISDN will use one B channel to access the Internet or remote network when you use the Dialup BOD link type. The router will use the parameters here to make a decision on when to activate/ drop the additional B channel. Note that cps (characters[...]

5-6 Advanced Setup 5.4 NA T Setup Usually you will use the router as a NA T-enabled router . NA T stands for Network Address Translation. It means the router gets one (in Single ISP , PPPoE, PPTP) or two (in Dual ISP mode) globally re- routeable IP addresses from the ISP . Local hosts will use private network IP addresses defined by RFC-1918 to com[...]

5-7 Advanced Setup The following example shows how an internal FTP server is exposed to the public domain. The internal FTP server is running on the local host addressed as 192.168.1.10. As shown above, the Port Redirection T able provides10 port-map- ping entries for internal hosts. Service Name: Specifies the name for the specific network service[...]

5-8 Advanced Setup offered by the internal host. Active: Check here to activate the port-mapping entry . Click “ OK ”. 5.4.2 DMZ Host Setup Click “ DMZ Host Setup ” to open the setup page. The DMZ Host set- tings allow a defined internal user to be exposed to the Internet to use some special-purpose applications such as Netmeeting or Intern[...]

5-9 Advanced Setup 5.5 Static Route Setup Vigor2200 series routers can also be set to operate as pure IP rout- ers. Y ou should specify the IP network configuration for the LAN1 interface using the 2nd IP address and 2nd subnet mask fields on the “ LAN1 TCP/IP and DHCP Setup ” page, and for the LAN2 interface using “ Internet Access Setup ”[...]

5-10 Advanced Setup router supports 10 static route rules for your configurations. Click the numbers in the index to enter the setup page for each rule. The following gives a network example with more detailed descrip- tions. For example, you have a network 192.168.100.0/24 connected on the LAN1 interface, and 192.168.200.0/24 connected on the LAN2[...]

5-11 Advanced Setup For LAN1: Click “ LAN1 TCP/IP and DHCP Setup ” to configure your LAN1 inter- face for IP routing. Check “ Enable ” and assign 192.168.100.1 in the 2nd IP Address field, 255.255.255.0 in the 2nd Subnet Mask field. Y ou now have a routeable network 192.168.100.0/24 connected on the LAN1 inter- face. For LAN2(W AN): T o con[...]

5-12 Advanced Setup addition, we assume another router , 192.168.200.253/24, is also con- nected to the same Ethernet segment as LAN2(WAN). Behind the router is another IP network, 192.168.202.0/24. The following sub- sections based on this example give more detailed explanations. 5.5.1 Add a Static Route In the above example, if you want the 192.1[...]

5-13 Advanced Setup the 192.168.202.0 network is behind the router . Network Interface: Specifies the network interface. In the example, we use LAN2 to connect to the next hop router 192.168.200.253. Click “ OK ”. Note: For the static route to work, the next hop router must also have added a static route to forward all 192.168.100.0/24 IP packe[...]

5-14 Advanced Setup Click “ OK ”. All items on the above setup page will be cleared and be removed from the routing table. 5.5.3 Deactivate a Preset Static Route Sometimes you may want to deactivate but not clear the preset static route. Set the Status/Action field to Inactive/Disable as shown below . Click “ OK ” to disable/make the preset[...]

5-15 Advanced Setup Filter . The former is designed to block or allow IP packets that will trigger the router to establish an outgoing connection. The latter is designed to block or allow which kind of IP packets are allowed to pass through the router when the WAN connection has been estab- lished. In concept, when an outgoing packet is to be route[...]

5-16 Advanced Setup The following sections will explain more about IP Filter/Firewall Setup using the Web Configurator . The Filter has 12 filter sets with 7 filter rules for each set. There are a total of 84 filter rules for the IP Filter/ Firewall Setup . By default, the Call Filter rules are defined in Filter Set 1 and the Data Filter rules are [...]

5-17 Advanced Setup Call Filter: Check “ Enable ” to activate the Call Filter function. Assign a start filter set for the Call Filter . Data Filter: Check “ Enable ” to activate the Data Filter func- tion. Assign a start filter set for the Data Filter . Log Flag: For troubleshooting needs you can specify the filter log here. None: The log f[...]

5-18 Advanced Setup Note: The filter log will be displayed on the T elnet terminal when you type the “log -f” command. MAC Adddress for Packet Duplication: Logged packets may also be logged to another location via Ethernet. If you want to duplicate logged packets from the router to another network device, you must enter the other devices’ MAC[...]

5-19 Advanced Setup Filter Rule : Click a button numbered “ 1 ” ~ “ 7 ” to edit the filter rule. Active : Enable or disable the filter rule. Next Filter Set : Specifies the next filter set to be linked behind the current filter set. The filters cannot be looped. The following setup pages show the default settings for the Call Filter and the[...]

5-20 Advanced Setup 5.6.4 Editing the Filter Rules Click the Filter Rule index button to enter the Filter Rule setup page for each filter . The following explains each configurable item in detail. Comments: Enter filter set comments/description. Maximum length is 14 characters. Check to enable the Filter Rule: Enables the filter rule. Pass or Block[...]

5-21 Advanced Setup Pass If No Further Match: A packet matching the rule, and that does not match further rules, will be passed through. Branch to Other Filter Set: If the packet matches the filter rule, the next filter rule will branch to the specified filter set. Duplicate to LAN: If you want to log the matched packets to another network device, [...]

5-22 Advanced Setup For the Data Filter: IN: Specifies the rule for filtering incoming packets. OUT : Specifies the rule for filtering outgoing packets. Protocol: Specifies the protocol(s) this filter rule will apply to. IP Address: Specifies a source and destination IP address for this filter rule to apply to. Placing the symbol “!” before a p[...]

5-23 Advanced Setup Don’t Care: Specifies no fragment options in the filter rule. Unfragmented: Applies the rule to unfragmented pack- ets. Fragmented: Applies the rule to fragmented packets. T oo Short: Applies the rule only to packets which are too short to contain a complete header . 5.6.5 Restricting Unauthorized Internet Services This sectio[...]

6-1 6 V irtual T A Application 6.1 Virtual T A Concepts 6.2 Installing a Virtual T A Client 6.3 Configuring a Virtual T A Client/Server[...]

6-2 V irtual T A Application Note: Not supported on the Vigor2200E model. This chapter covers Virtual T A concepts and explains how to setup a Virtual T A. Quick Setup > Virtual T A (Remote CAPI) Setup 6.1 Virtual T A Concepts The term Virtual T A means the local Ethernet-connected hosts or PCs use popular CAPI-based software such as RVS-COM or [...]

6-3 V irtual T A Application The maximum number of active clients is also 2. 4. Before you set up the Virtual T A, you must set the correct country code. Click “ ISDN Setup ” in the Basic Setup group. As the following application chart shows, the Virtual T A client can make an outgoing call or accept an incoming call to/from a peer F AX machine[...]

6-4 V irtual T A Application When the icon text is GREEN, the Virtual T A client is connected to the Virtual T A server and you can launch your CAPI-based software to use the client to access the router . Read your software user guide for detailed configuration. If the icon text is RED, it means the client lost the connection with the server . Chec[...]

6-5 V irtual T A Application V irtual T A Server: Enable: Check to activate the server . Disable: Check to deactivate the server . All Virtual T A appli- cations will be stopped. V irtual T A User Profiles: Username: Specifies the username for a specific client. Password: Specifies the password for a specific client. MSN1, MSN2, MSN3: MSN stands fo[...]

6-6 V irtual T A Application Creating a User Profile Note that creating a single user access account limits access to the Virtual T A server to only the specified account holders. In the following, we assume you have no MSN service from your ISDN network provider . 1. On the server: Click “ Virtual T A (Remote CAPI) Setup ”, and fill in the Use[...]

6-7 V irtual T A Application 4. Enter the Username and Password and click “ OK ”. After a short time the VT icon text will become green. Configuring the MSN Number If you have subscribed to an MSN number service, the Virtual T A server can specify which client has the specified MSN number . When an incoming call arrives, the server will alert t[...]

7-1 7 System Management 7.1 Online Status 7.2 Management Setup 7.3 Diagnostic T ools 7.4 Reboot System 7.5 Firmware Upgrade[...]

7-2 System Management This chapter will show you how to manage your router using the Sys- tem Management tools shown below . System Management > Online Status > Management Setup > Diagnostic T ools > Reboot System > Firmware Upgrade (TFTP Server) 7.1 Online Status Click “ Online Status ” to open the Online Status page. In the exa[...]

7-3 System Management The Online Status page contains three subgroups: ISDN Status, LAN1 Status and LAN2/W AN Status. ISDN Status: (Vigor2200 and Vigor2200X Only) Active Connection: The ISP , active remote dial-in user , or LAN- to-LAN profile name and also the IP address for each B chan- nel. TX Pkts: T otal number of transmitted IP packets sent d[...]

7-4 System Management Drop B1: Click to disconnect the B1 channel. Drop B2: Click to disconnect the B2 channel. LAN1 Status: IP Address: IP address of the LAN1 interface. TX Packets: T otal number of transmitted IP packets sent since the router was powered on. RX Packets: T otal number of received IP packets received since the router was powered on[...]

7-5 System Management 7.2 Management Setup By default, the router may be configured and managed with any T elnet client or Web browser running on any operating system. There is no requirement for additional software or utilities. However , for some spe- cific environments, you may want to change the server port numbers for the built-in T elnet or H[...]

7-6 System Management specific host or network defined in the list. A maximum of three IPs/ subnet masks may be entered. IP: Specifies an IP address allowed to login to the router . Subnet Mask: Specifies a subnet mask allowed to login to the router . Port Setup Default Ports: Check to use standard port numbers for the T elnet and HTTP servers. Use[...]

7-7 System Management ISDN / PPPoE / PPTP Diagnostics: Click here to open the following page. The page shown here is for reference only; individual networks will show different results. The page has been grouped into two subgroups, the upper is for ISDN link status, the lower is for broadband access status. Refresh: T o obtain the latest informatio[...]

7-8 System Management Drop B1: Click to disconnect the B1 channel. Drop B2: Click to disconnect the B2 channel. Broadband Access: Broadband Access Mode/Status: Displays the broadband access mode and status. If the broadband connection is ac- tive, it will show PPPoE , PPTP , Static IP , or DHCP Client depending on which access mode is enabled. If t[...]

7-9 System Management Refresh: Click to reload the page. V iew Routing T able: Click View Routing T able to view the router ’s routing table. The table provides current IP routing information held in the router . T o the left of each routing rule you will see a key . These keys are defined as: C --- Directly connected. S --- Static route. R --- R[...]

7-10 System Management V iew ARP Cache T able: Click View ARP Cache T able to view the ARP (Address Resolution Protocol) cache held in the router . The table shows a mapping be- tween an Ethernet hardware address (MAC Address) and an IP ad- dress. View DHCP Assigned IP Addresses: View DHCP Assigned IP Addresses provides information on IP ad- dress [...]

7-11 System Management V iew NA T Port Redirection Running T able: If you have configured Port Redirection (under NA T Setup ), click to verify that your settings are correct for redirecting specific port numbers to specified internal users.[...]

7-12 System Management V iew NA T Active Sessions T able: As the router accesses the Internet through the built-in NA T engine, click View NA T Active Sessions T able to see which active outgoing sessions are online. Each line across the screen indicates an active session. The following information is displayed: Private IP , Port: The internal user[...]

7-13 System Management 7.4 Reboot System The Web Configurator may be used to restart your router . Click “ Reboot System “ to open the following page. There are two reboot options: Using current configuration and Us- ing factory default configuration . If you want to reboot the router using current running configurations, check Using current co[...]

7-14 System Management tion. Click Firmware Upgrade (TFTP Server) to open the following screen. Click “ OK ” to enable the function. 3. Click Start > Programs > Router T ools > Firmware Upgrade Utility to launch the Firmware Upgrade Utility .[...]

7-15 System Management The Router IP field will show the IP address of your router . Click “ Browse ” to select the new firmware file. The file shown here (v2k200001.all) is for example purposes only and the latest firmware will have a different file name. Click “ Upgrade ”. The upgrade status will be shown on the progress bar .[...]

8-1 8 T roubleshooting & F AQ 8.1 Using the T elnet T erminal Commands 8.2 Viewing Call Logs 8.3 Viewing ISDN Logs 8.4 Viewing PPP Logs 8.5 Viewing W AN Logs 8.6 T roubleshooting the DHCP Client on W AN 8.7 F AQs[...]

8-2 T roubleshooting & F AQ The following section explains how to use T elnet terminal commands to diagnose your network problems via the built-in debug tool. Our examples use Windows’ T elnet client software. If you are a Mac user , you should install third-party T elnet client software on your computer . By default, Linux has a built-in T e[...]

8-3 T roubleshooting & F AQ Command Help: If you are not familiar with these commands, type the command fol- lowed by a question mark ?. For example, the ip command is a first level command. T ype “ip ?” to get next level commands as shown below . Recall Commands: The T elnet terminal also provides a method to recall the command history . U[...]

8-4 T roubleshooting & F AQ 8.2 Viewing Call Logs The Call log provides a simple method for troubleshooting call setup or WAN connection problems. By default, the router records WAN connection messages. This information can be helpful in diagnosing WAN connection problems. If you do not understand the content, you can easily save the log and se[...]

8-5 T roubleshooting & F AQ 8.3 Viewing ISDN Logs T o capture messages exchanged on the ISDN interface, use the “ log -i ” command to dump all exchanged messages on the ISDN interface. The steps are: 1. Login to the T elnet terminal. 2. T ype “ log -F w ” to clear all ISDN logs. 3. Ping to any outside host to trigger the router to dial [...]

8-6 T roubleshooting & F AQ type the log -i -t command. This command allows you to see whether the ISDN connection could be established or not. Note that if you cannot understand the details, save these messages in a file and send it to a support technician. 8.4 Viewing PPP Logs T o view PPP logs, type “ log -p ”. The steps are: 1. Login to[...]

8-7 T roubleshooting & F AQ 8.5 Viewing W AN Logs T o view all W AN logs, including ISDN D-channel and PPP/PPPoE/ PPTP messages, the simplest way is to type “ log -w -t ”. The steps are: 1. Login to the T elnet terminal. 2. T ype “ log -F w ” to clear all PPP/PPPoE/PPTP and ISDN logs. 3. Ping to any outside host to trigger the router to[...]

8-8 T roubleshooting & F AQ Renewing the IP Address T ype “ ip dhcpc renew ” to get a new IP address from the cable service provider . V iewing the W AN Status T ype “ ip dhcpc status ” to show the status of the DHCP client for the WAN interface. Viewing DHCP Logs In some special cases, you may want to capture the detailed DHCP messages[...]

8-9 T roubleshooting & F AQ as Obtain an IP address automatically . 8.7 F AQs The following frequently asked questions cover common questions. For more F AQs, visit DrayT ek’ s website (www .draytek.com) or contact your local technical support. 1. What is the default administrator password to login to the router? A: By default, you don’t ne[...]

8-10 T roubleshooting & F AQ 3. What is the default IP address of the router? A: The default IP address is 192.168.1.1 with subnet mask 255.255.255.0. 4. Why does the router dial out very often? A: Examine the packets that trigger the router to dial out. Login to the Web Configurator and click “ Diagnostic T ools ” > “ T riggered Dial-[...]

8-11 T roubleshooting & F AQ[...]

T echnical Specifications e c a f r e t n I ) N A W ( 2 N A L s r o t c e n n o c 5 4 - J R o w t h t i w t r o p ) N A W ( 2 N A L T - e s a B 0 1 e n O . 1 t r o p 5 4 - J R e n o h t i w t r o p N A W T - e s a B 0 1 e n O , ) 0 0 2 2 r o g i V ( ) E 0 0 2 2 r o g i V , X 0 0 2 2 r o g i V ( E o P P P . 2 ) g n i s s e r d d A P I c i m a n y D [...]