Draytek Vigor2132 Series, Vigor2132FVn Series, Vigor2132Vac Series, Vigor2132ac Series User Manual

Page 1
Page 2
Vigor2132 Series User’s Guide
ii
Vigor2132 Series
User’s Guide
Version: 1.4
Firmware Version: V3.7.9
(For future update, please visit DrayTek web site)
Date: August 28, 2017
Page 3
Vigor2132 Series User’s Guide
iii
Intellectual Property Rights (IPR) Information
Copyrights
© All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.
Trademarks
The following trademarks are used in this document:
Microsoft is a registered trademark of Microsoft Corp. Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7, 8 and Explorer are
trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Inc. Other products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety Instructions
Read the installation guide thoroughly before you set up the router. The router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router yourself.
Do not place the router in a damp or humid place, e.g. a bathroom. The router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
Do not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
Do not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
Keep the package out of reach of children. When you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, dam aged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to revi se the m anual and onli ne documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.
Be a Registered Owner
Web registration is preferred. You can register your Vigor router via http://www.dayTek.com.
Firmware & Tools Updates
Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
http://www.drayTek.com
Page 4
Vigor2132 Series User’s Guide
iv
TTaabbllee ooff CCoonntteennttss
Introduction...................................................................................................1
1.1 Web Configuration Buttons Explanation................................................................................. 2
1.2 LED Indicators and Connectors.............................................................................................. 3
1.2.1 Vigor2132FVn................................................................................................................... 3
1.2.2 Vigor2132ac/Vac .............................................................................................................. 5
1.3 Hardware Installation .............................................................................................................. 7
1.4 Printer Installation ................................................................................................................... 8
1.5 Accessing Web Page............................................................................................................ 15
1.6 Changing Password.............................................................................................................. 16
1.7 Introducing Dashboard.......................................................................................................... 17
1.7.1 Virtual Panel ................................................................................................................... 18
1.7.2 Name with a Link............................................................................................................ 19
1.7.3 Quick Access for Common Used Menu.......................................................................... 19
1.7.4 GUI Map ......................................................................................................................... 20
1.7.5 Web Console.................................................................................................................. 21
1.7.6 Config Backup ................................................................................................................ 22
1.8 Online Status......................................................................................................................... 23
1.8.1 Physical Connection.......................................................................................................23
1.8.2 Virtual WAN.................................................................................................................... 25
1.9 Saving Configuration............................................................................................................. 25
Quick Setup.................................................................................................27
2.1 Quick Start Wizard................................................................................................................ 27
2.2 Service Activation Wizard...................................................................................................... 36
2.3 VPN Client Wizard ................................................................................................................ 38
2.4 VPN Server Wizard............................................................................................................... 44
2.5 Wireless Wizard.................................................................................................................... 49
2.6 VoIP Wizard........................................................................................................................... 53
2.7 Registering Vigor Router....................................................................................................... 55
Tutorials and Applications......................................................................... 59
3.1 How to configure settings for IPv6 Service in Vigor2132FVn............................................... 59
3.2 How can I get the files from USB storage device connecting to Vigor router?..................... 71
3.3 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPSec Tunnel
(Main Mode)................................................................................................................................ 73
Page 5
Vigor2132 Series User’s Guide
v
3.4 How to Optimize the Bandwidth through QoS Technology................................................... 77
3.5 QoS Setting Example............................................................................................................ 81
3.6 How to use Landing Page Feature ....................................................................................... 85
3.7 How to Send a Notification to Specified Phone Number via SMS Service in WAN
Disconnection.............................................................................................................................. 90
3.8 How to Create an Account for MyVigor................................................................................. 94
3.8.1 Create an Account via Vigor Router............................................................................... 94
3.8.2 Create an Account via MyVigor Web Site ...................................................................... 98
3.9 How to Configure Certain Computers Accessing to Internet.............................................. 102
3.10 How to Block Facebook Service Accessed by the Users via Web Content Filter / URL
Content Filter............................................................................................................................. 106
3.11 How to Setup Address Mapping.........................................................................................112
3.12 How to Setup Load Balance for Packets?.........................................................................116
3.13 How to Authenticate Clients via User Management...........................................................118
3.14 How to use DNS Filter....................................................................................................... 127
3.15 How to prevent CPE's settings from being changed by the end-users? .......................... 130
Advanced Configuration..........................................................................133
4.1 WAN.................................................................................................................................... 133
4.1.1 Basics of Internet Protocol (IP) Network....................................................................... 133
4.1.2 General Setup............................................................................................................... 134
4.1.3 Internet Access.............................................................................................................135
4.1.4 Multi-VLAN.................................................................................................................... 153
4.2 LAN ..................................................................................................................................... 157
4.2.1 Basics of LAN ............................................................................................................... 157
4.2.2 General Setup............................................................................................................... 159
4.2.3 Static Route.................................................................................................................. 169
4.2.4 VLAN............................................................................................................................. 174
4.2.5 Bind IP to MAC............................................................................................................. 177
4.2.6 LAN Port Mirror............................................................................................................. 179
4.2.7 Wired 802.1x................................................................................................................. 180
4.2.8 Web Portal Setup.......................................................................................................... 181
4.3 Route Policy........................................................................................................................ 183
4.4 NA T..................................................................................................................................... 191
4.4.1 Port Redirection............................................................................................................ 192
4.4.2 DMZ Host...................................................................................................................... 195
4.4.3 Open Ports.................................................................................................................... 198
4.4.4 Port Triggering.............................................................................................................. 200
4.4.5 ALG............................................................................................................................... 203
4.5 Hardware Acceleration........................................................................................................ 204
4.5.1 Setup............................................................................................................................. 204
4.6 Firewall................................................................................................................................ 206
4.6.1 Basics for Firewall......................................................................................................... 206
4.6.2 General Setup............................................................................................................... 208
4.6.3 Filter Setup ................................................................................................................... 213
Page 6
Vigor2132 Series User’s Guide
vi
4.6.4 DoS Defense ................................................................................................................ 221
4.7 User Management............................................................................................................... 225
4.7.1 General Setup............................................................................................................... 226
4.7.2 User Profile................................................................................................................... 227
4.7.3 User Group................................................................................................................... 231
4.7.4 User Online Status........................................................................................................ 232
4.8 Objects Settings.................................................................................................................. 233
4.8.1 IP Object....................................................................................................................... 234
4.8.2 IP Group ....................................................................................................................... 237
4.8.3 IPv6 Object................................................................................................................... 238
4.8.4 IPv6 Group.................................................................................................................... 240
4.8.5 Service Type Object ..................................................................................................... 241
4.8.6 Service Type Group...................................................................................................... 243
4.8.7 Keyword Object ............................................................................................................244
4.8.8 Keyword Group............................................................................................................. 246
4.8.9 File Extension Object.................................................................................................... 247
4.8.10 SMS/Mail Service Object............................................................................................ 249
4.8.11 Notification Object....................................................................................................... 254
4.9 CSM Profile......................................................................................................................... 256
4.9.1 APP Enforcement Profile.............................................................................................. 257
4.9.2 APPE Signature Upgrade............................................................................................. 261
4.9.3 URL Content Filter Profile............................................................................................. 263
4.9.4 Web Content Filter Profile............................................................................................. 267
4.9.5 DNS Filter Profile..........................................................................................................271
4.10 Bandwidth Management................................................................................................... 273
4.10.1 Sessions Limit............................................................................................................. 273
4.10.2 Bandwidth Limit .......................................................................................................... 275
4.10.3 Quality of Service........................................................................................................ 277
4.11 Applications....................................................................................................................... 286
4.11.1 Dynamic DNS............................................................................................................. 286
4.11.2 LAN DNS / DNS Forwarding ...................................................................................... 289
4.11.3 Schedule..................................................................................................................... 292
4.11.4 RADIUS...................................................................................................................... 295
4.11.5 UPnP........................................................................................................................... 296
4.11.6 IGMP........................................................................................................................... 297
4.11.7 Wake on LAN.............................................................................................................. 298
4.11.8 SMS / Mail Alert Service............................................................................................. 299
4.12 VPN and Remote Access.................................................................................................. 301
4.12.1 Remote Access Control.............................................................................................. 302
4.12.2 PPP General Setup .................................................................................................... 302
4.12.3 IPSec General Setup.................................................................................................. 304
4.12.4 IPSec Peer Identity..................................................................................................... 305
4.12.5 Remote Dial-in User ................................................................................................... 307
4.12.6 LAN to LAN................................................................................................................. 310
4.12.7 Connection Management ........................................................................................... 319
4.13 Certificate Management.................................................................................................... 319
4.13.1 Local Certificate.......................................................................................................... 320
4.13.2 Trusted CA Certificate ................................................................................................ 322
4.13.3 Certificate Backup....................................................................................................... 324
4.14 VoIP................................................................................................................................... 325
4.14.1 DialPlan ...................................................................................................................... 327
4.14.2 SIP Accounts.............................................................................................................. 335
Page 7
Vigor2132 Series User’s Guide
vii
4.14.3 Phone Settings ...........................................................................................................340
4.14.4 Status.......................................................................................................................... 345
4.15 Wireless LAN(2.4GHz/5GHz) ........................................................................................... 347
4.15.1 Basic Concepts........................................................................................................... 347
4.15.2 General Setup............................................................................................................. 350
4.15.3 Security....................................................................................................................... 353
4.15.4 Access Control............................................................................................................ 355
4.15.5 WPS............................................................................................................................ 356
4.15.6 WDS............................................................................................................................ 359
4.15.7 Advanced Setting........................................................................................................ 362
4.15.8 WMM Configuration.................................................................................................... 364
4.15.9 AP Discovery.............................................................................................................. 366
4.15.10 Station List................................................................................................................ 367
4.15.11 Station Control.......................................................................................................... 367
4.16 USB Application................................................................................................................ 369
4.16.1 USB General Settings................................................................................................. 369
4.16.2 USB User Management.............................................................................................. 370
4.16.3 File Explorer................................................................................................................ 372
4.16.4 USB Device Status..................................................................................................... 373
4.16.5 Temperature Sensor................................................................................................... 374
4.17 System Maintenance......................................................................................................... 376
4.17.1 System Status............................................................................................................. 376
4.17.2 TR-069........................................................................................................................ 378
4.17.3 Administrator Password.............................................................................................. 380
4.17.4 User Password ........................................................................................................... 382
4.17.5 Login Page Greeting................................................................................................... 385
4.17.6 Configuration Backup ................................................................................................. 387
4.17.7 Syslog/Mail Alert......................................................................................................... 389
4.17.8 Time and Date............................................................................................................ 392
4.17.9 SNMP.......................................................................................................................... 393
4.17.10 Management............................................................................................................. 395
4.17.11 Reboot System......................................................................................................... 398
4.17.12 Firmware Upgrade.................................................................................................... 399
4.17.13 Activation.................................................................................................................. 400
4.18 Diagnostics........................................................................................................................ 401
4.18.1 Dial-out Triggering...................................................................................................... 402
4.18.2 Routing Table ............................................................................................................. 403
4.18.3 ARP Cache Table....................................................................................................... 404
4.18.4 IPv6 Neighbour Table................................................................................................. 404
4.18.5 DHCP Table................................................................................................................ 405
4.18.6 NAT Sessions Table................................................................................................... 406
4.18.7 DNS Cache Table....................................................................................................... 407
4.18.8 Ping Diagnosis............................................................................................................ 408
4.18.9 Data Flow Monitor....................................................................................................... 409
4.18.10 Traffic Graph............................................................................................................. 411
4.18.11 Trace Route.............................................................................................................. 412
4.18.12 Syslog Explorer......................................................................................................... 413
4.18.13 IPv6 TSPC Status..................................................................................................... 414
4.19 External Devices............................................................................................................... 415
Trouble Shooting......................................................................................417
Page 8
Vigor2132 Series User’s Guide
viii
5.1 Checking If the Hardware Status Is OK or Not....................................................................417
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................. 418
5.3 Pinging the Router from Y our Computer............................................................................. 421
5.4 Checking If the ISP Settings are OK or Not........................................................................ 422
5.5 Backing to Factory Default Setting If Necessary ................................................................ 422
5.6 Contacting DrayTek............................................................................................................. 423
Page 9
Vigor2132 Series User’s Guide
1
IInnttrroodduuccttiioonn
NNoottee:: TThhiiss iiss aa ggeenneerriicc IInntteerrnnaattiioonnaall vveerrssiioonn ooff tthhee uusseerr gguuiiddee.. SSppeecciiffiiccaattiioonn,, ccoommppaattiibbiilliittyy aanndd ffeeaattuurreess vvaarryy bbyy rreeggiioonn.. FFoorr ssppeecciiffiicc uusseerr gguuiiddeess ssuuiittaabbllee ffoorr yyoouurr rreeggiioonn oorr pprroodduucctt,, pplleeaassee ccoonnttaacctt llooccaall ddiissttrriibbuuttoorr..
Vigor2132 Series integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth.
The entertainment applications running over the home network infrastructure and home-based productivity for SOHO are growing while the broadband bandwidth is increasingly available within affordable budget along with deployment of FTTx. The fiber WAN port of Vigor2132FVn optimizes the throughput performance and flexibility for time-critical console gaming, multi-media streaming and P2P downloading as well as IP telephony. The four Gigabit Ethernet (10/100/1000 LAN ports) auto-sensing ports facilitate home networking with width-intensive applications! Through the combination of Fiber WAN and Gigabit LAN ports to optimize the bandwidth usage, the downstream data and voice packets for Triple play can be flawlessly displayed in endpoint devices, such as HDTV, desktop/laptop or analog/IP phone.
The Vigor2132FVn/Vac/ac series router gives you not only the 802.11n/ac standards for coverage, but also the time scheduling function to save your energy bill plus reducing the carbon footprint. For wireless security, it is also efficient for wireless network management. For instance, its "Wireless LAN isolation" can easily isolate wireless network for friends or guests. Then, the access rights of various wireless clients can be managed by “MAC address control" and deployed "WEP/WPA/WPA2" authentication. No need to remember passwords, you simply press "WPS" button on router and then enable users to securely connect laptop or computers to the router!
The fiber deployment (for Vigor2132FVn) lets businesses and common people have fatter pipe of accessing global network. DrayTek Vigor2132FVn Fiber Router is developed in compliance with the Super-fast broadband architecture and customized for users which already
Page 10
Vigor2132 Series User’s Guide
2
have Fiber to the building (FTTB) or Fiber to the home (FTTH). The bandwidth-consumed multimedia streaming and crystal-clear VoIP functionalities are realized through the Vigor2132FVn's upto-1000Mpbs (1 Gigabit) WAN throughput and advanced bandwidth management. You can apply the rules of Session Limit, Bandwidth Limit, Port Rate Control, QoS control list, Ports Priority to different traffic type for better efficiency.
By making the most of your broadband line, the VoIP call will be carried to the destination via Internet. So you can save on the telephone bill. Combining the Internet Telephony service from the Internet Telephony Service Provider (ITSP), the Vigor2132FVn charter VoIP calls to be made to any legacy phone numbers, even including mobile and long distance numbers!
In addition, it supports the worldwide standard TR-069 management and customized triple play while most fiber routers could not have the above distinguished features.
11..11 WWeebb CCoonnffiigguurraattiioonn BBuuttttoonnss EExxppllaannaattiioonn
Several main buttons appeared on the web pages are defined as the following:
Save and apply current settings.
Cancel current settings and recover to the previous saved settings.
Clear all the selections and parameters settings, including selection from
drop-down list. All the values must be reset with factory default settings.
Add new settings for specified item.
Edit the settings for the selected item.
Delete the selected item with the corresponding settings.
Note: For the other buttons shown on the web pages, please refer to Chapter 3, 4 for detailed explanation.
Page 11
Vigor2132 Series User’s Guide
3
11..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss
Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.
11..22..11 VViiggoorr22113322FFVVnn
LED Status Explanation
Blinking The router is powered on and running normally. ACT (Activity) Off The router is powered off. On USB device is connected and ready for use. USB1~ USB2 Blinking The data is transmitting. On Internet connection is ready. Off Internet connection is not ready.
WAN
Blinking The data is transmitting. On
Wireless access point is ready.
WLAN
Blinking
It will blink slowly while wireless traffic goes through. ACT and WLAN LEDs blink quickly and
simultaneously when WPS is working, and will return to normal condition after two minutes. (You need to setup WPS within 2 minutes.)
VPN On The VPN tunnel is active. Fiber
On SFP Module is plugged and fiber link is up. On The phone connected to this port is off-hook.
Off The phone connected to this port is on-hook.
Phone1~ Phone2
Blinking A phone call comes.
LED on Connector
On The port is connected. Off The port is disconnected.
Left LED
Blinking The data is transmitting. On The port is connected with 1000Mbps.
LAN1~ LAN4
Right LED
Off The port is connected with 10/100Mbps
Page 12
Vigor2132 Series User’s Guide
4
Interface Description
Wireless LAN ON/OFF/WPS
Press the button and release it within 2 seconds. When the wireless function is ready, the green LED will be on.
Press the button and release it within 2 seconds to turn off the WLAN function. When the wireless function is not ready, the LED will be off.
When WPS function is enabled by web user interface, press this button for mor e t h a n 2 seconds to wait for client’s device ma king
network
connection through WPS.
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button.
Then the router will restart with the factory default configuration. USB1~USB2 Connecter for a USB device. WAN Fiber connection (100Mbps) for accessing the Internet.
LAN1~LAN4 Connecters for local network devices. Phone1~ Phone2 Connecter for analog phone(s). PWR Connecter for a power adapter. ON/OFF Power Switch.
Page 13
Vigor2132 Series User’s Guide
5
11..22..22 VViiggoorr22113322aacc//VVaacc
LED Status Explanation
Blinking The router is powered on and running normally. ACT (Activity) Off The router is powered off. On USB device is connected and ready for use. USB1~USB2 Blinking The data is transmitting. On Internet connection is ready. Off Internet connection is not ready.
WAN
Blinking The data is transmitting. On Wireless access point with bandwidth of 2.4GHz/5GHz
is ready.
2.4G/5G
Blinking It will blink slowly while wireless traffic goes through.
ACT and WLAN LEDs blink quickly and simultaneously when WPS is working, and will return to normal condition after two minutes. (You need to setup WPS within 2 minutes.)
CSM
On The profile(s) of CSM (Content Security Management)
for IM/P2P, URL/Web Content Filter application can be enabled from Firewall >>General Setup. (Such profile must be established under CSM menu).
On The DoS function is active. DoS Blinking It will blink while detecting an attack.
QoS
On The QoS function is active. On The phone connected to this port is off-hook.
Off The phone connected to this port is on-hook.
Phone1 ~ Phone2
Blinking A phone call comes.
LED on Connector
On The port is connected. Off The port is disconnected.
Left LED
Blinking The data is transmitting. On The port is connected with 1000Mbps.
WAN
Right LED
Off The port is connected with 10/100Mbps On The port is connected. Off The port is disconnected.
Left LED
Blinking The data is transmitting. On The port is connected with 1000Mbps.
LAN1~ LAN4
Right LED
Off The port is connected with 10/100Mbps
Page 14
Vigor2132 Series User’s Guide
6
Interface Description
Wireless LAN ON/OFF/WPS
Press the button and release it within 2 seconds. When the wireless
function is ready, the green LED will be on.
Press the button and release it within 2 seconds to turn off the WLAN
function. When the wireless function is not ready, the LED will be off.
When WPS function is enabled by web user interface, press this button
for mor e t h a n 2 seconds to wait for client’s device ma king
network
connection through WPS. Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you
see the ACT LED begins to blink rapidly than usual, release the button.
Then the router will restart with the factory default configuration. USB1~USB2 Connecter for a USB device. WAN Connecter for local network devices or modem for accessing Internet. LAN1~LAN4 Connecters for local network devices. Phone1~ Phone2 Connecter for analog phone(s). PWR Connecter for a power adapter. ON/OFF Power Switch.
Page 15
Vigor2132 Series User’s Guide
7
11..33 HHaarrddwwaarree IInnssttaallllaattiioonn
Before starting to configure the router, you have to connect your devices correctly. In this section, Vigor2132FVn is taken as an example.
1. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router
with Ethernet cable (RJ-45).
2. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router and
the other end of the cable (RJ-45) into the Ethernet port on your computer.
3. Connect one end of the power adapter to the router’s power port on the rear panel, and
the other side into a wall outlet.
4. Power on the device by pressing down the power switch on the rear panel.
5. The system starts to initiate. After completing the system test, the ACT LED will light
up and start blinking.
Page 16
Vigor2132 Series User’s Guide
8
11..44 PPrriinntteerr IInnssttaallllaattiioonn
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com.
Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
1. Connect the printer with the router through USB/parallel port.
2. Open All Programs>>Getting Started>>Devices and Printers.
Page 17
Vigor2132 Series User’s Guide
9
3. Click Add a printer.
4. A dialog will appear. Click Add a local printer and click Next.
5. In this dialog, choose Create a new port. In the field of Type of port, use the drop
down list to select Standard TCP/IP Port. Then, click Next.
Page 18
Vigor2132 Series User’s Guide
10
6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or
IP Address and type 192.168.1.1 as the Port name. Then, click Next.
7. Click Standard and choose Generic Network Card.
Page 19
Vigor2132 Series User’s Guide
11
8. Now, your system will ask you to choose right name of the printer that you installed onto
the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next.
9. Type a name for the chosen printer. Click Next.
Page 20
Vigor2132 Series User’s Guide
12
10. Choose Do not share this printer and click Next.
11. Then, in the following dialog, click Finish.
Page 21
Vigor2132 Series User’s Guide
13
12. The new printer has been added and displayed under Printers and Faxes. Click the new
printer icon and click Printer server properties.
13. Edit the property of the new printer you have added by clicking Configure Port.
Page 22
Vigor2132 Series User’s Guide
14
14. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next
please refer to the red rectangle for choosing the correct protocol and LPR name.
The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router.
Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes; find out the link of USB>>Printer Server and click it.
Page 23
Vigor2132 Series User’s Guide
15
Then, click the What types of printers are compatible with Vigor router? link.
Note 2: Vigor router supports printing request from computers via LAN ports but not WAN port.
11..55 AAcccceessssiinngg WWeebb PPaaggee
1. Make sure your PC connects to the router correctly.
You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section ­Trouble Shooting of the guide.
2. Open a web browser on your PC and type http://192.168.1.1. The following window
will be open to ask for username and password.
3. Please type “admin/admin” as the Username/Password and click Login.
Notice: If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem.
4. Now, the Main Screen will appear.
Page 24
Vigor2132 Series User’s Guide
16
Note: The home page will be different slightly in accordance with the type of the router you have.
5. The web page can be logged out according to the chosen condition. The default setting is
Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity.
11..66 CChhaannggiinngg PPaasssswwoorrdd
Please change the password for the original security of the router.
1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will
open to ask for username and password.
2. Please type “admin/admin” as Username/Password for accessing into the web user
interface with admin mode.
3. Go to System Maintenance page and choose Administrator Password.
Page 25
Vigor2132 Series User’s Guide
17
4. Enter the login password (the default is “admin”) on the field of Old Password. Type
new password on the fields of New Password and Confirm Password. Then click OK to continue.
Note: The maximum length of the password you can set is 23 characters.
5. Now, the password has been changed. Next time, use the new password to access the
Web user interface for this router.
Note: Even the password has been changed, the Username for logging to the web user interface is still “admin”.
11..77 IInnttrroodduucciinngg DDaasshhbbooaarrdd
Dashboard shows the connection status including System Information, IPv4 Internet Access, IPv6 Internet Access, Interface (physical connection), Security and Quick Access.
Click Dashboard from the main menu on the left side of the main page.
A web page with default selections will be displayed on the screen. Refer to the following figure:
Page 26
Vigor2132 Series User’s Guide
18
11..77..11 VViirrttuuaall PPaanneell
On the top of the Dashboard, a virtual panel (simulating the physical panel of the router) displays the physical interface connection. It will be refreshed every five seconds.
For detailed information about the LED display, refer to 1.2 LED Indicators and Connectors.
Page 27
Vigor2132 Series User’s Guide
19
11..77..22 NNaammee wwiitthh aa LLiinnkk
A name with a link (e.g., Router Name, Current Time, WAN1 and etc.) below means you can click it to open the configuration page for modification.
11..77..33 QQuuiicckk AAcccceessss ffoorr CCoommmmoonn UUsseedd MMeennuu
All the menu items can be accessed and arranged orderly on the left side of the main page for your request. However, some important and common used menu items which can be accessed in a quick way just for convenience.
Look at the right side of the Dashboard. You will find a group of common used functions grouped under Quick Access.
The function links of System Status, Dynamic DDNS, TR-069, User Management, IM/P2P Block, Schedule, Syslog/Mail Alert, RADIUS, Firewall Object Setting and Data Flow Monitor are displayed here. Move your mouse cursor on any one of the links and click on it. The corresponding setting page will be open immediately.
In addition, quick access for VPN security settings such as Remote Dial-in User and LAN to LAN are located on the bottom of this page. Scroll down the page to find them and use them if required.
Page 28
Vigor2132 Series User’s Guide
20
Note that there is a plus (
) icon located on the left side of VPN/LAN. Click it to review the
VPN connection(s) used presently.
Host connected physically to the router via LAN port(s) will be displayed with green circles in the field of Connected.
All of the hosts (including wireless clients) displayed with Host ID, IP Address and MAC address indicates that the traffic would be transmitted through LAN port(s) and then the WAN port. The purpose is to perform the traffic monitor of the host(s).
11..77..44 GGUUII MMaapp
All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions.
Page 29
Vigor2132 Series User’s Guide
21
11..77..55 WWeebb CCoonnssoollee
It is not necessary to use the telnet command via DOS prompt. The changes made by using web console have the same effects as modified through web user interface. The functions/settings modified under Web Console also can be reviewed on the web user interface.
Click the Web Console icon on the top of the main screen to open the following screen.
Page 30
Vigor2132 Series User’s Guide
22
11..77..66 CCoonnffiigg BBaacckkuupp
There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup.
Simply click the icon on the top of the main screen and a pop up dialog will appear.
Click Save to store the setting.
11..77..77 LLooggoouutt
Click the Logout icon to exit the web user interface.
Page 31
Vigor2132 Series User’s Guide
23
11..88 OOnnlliinnee SSttaattuuss
11..88..11 PPhhyyssiiccaall CCoonnnneeccttiioonn
Such page displays the physical connection status such as LAN connection status, WAN connection status, and so on.
PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv44 PPrroottooccooll
PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv66 PPrroottooccooll
Detailed explanation (for IPv4) is shown below:
Item Description LAN Status
Primary DNS-Displays the primary DNS server address
for WAN interface. Secondary DNS -Displays the secondary DNS server
address for WAN interface.
IP Address-Displays the IP address of the LAN interface. TX Packets-Displays the total transmitted packets at the
LAN interface. RX Packets-Displays the total received packets at the LAN
interface.
Page 32
Vigor2132 Series User’s Guide
24
Item Description WAN Status
Enable – Yes in red means such interface is available but not enabled. Yes in green means such interface is enabled.
Line – Displays the physical connection (Ethernet, or USB)
of this interface.
Name – Display the name of the router. Mode - Displays the type of WAN connection (e.g.,
PPPoE).
Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. GW IP - Displays the IP address of the default gateway. TX Packets - Displays the total transmitted packets at the
WAN interface. TX Rate - Displays the speed of transmitted octets at the
WAN interface. RX Packets - Displays the total number of received packets
at the WAN interface. RX Rate - Displays the speed of received octets at the
WAN interface.
Detailed explanation (for IPv6) is shown below:
Item Description LAN Status
IP Address- Displays the IPv6 address of the LAN
interface.. TX Packets-Displays the total transmitted packets at the
LAN interface. RX Packets-Displays the total received packets at the LAN
interface. TX Bytes - Displays the speed of transmitted octets at the
LAN interface. RX Bytes - Displays the speed of received octets at the
LAN interface.
WAN IPv6 Status
Enable – No in red means such interface is available but
not enabled. Yes in green means such interface is enabled. No in red means such interface is not available.
Mode - Displays the type of WAN connection (e.g., TSPC). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. Gateway IP - Displays the IP address of the default
gateway.
Note: The words in green mean that the WAN connection of that interface is ready for
accessing Internet; the words in red mean that the WAN connection of that interface is not ready for accessing Internet.
Page 33
Vigor2132 Series User’s Guide
25
11..88..22 VViirrttuuaall WWAANN
Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, VoIP service and so on. The field of Application will list the purpose of such WAN connection.
11..99 SSaavviinngg CCoonnffiigguurraattiioonn
Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you.
Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button.
Page 34
Vigor2132 Series User’s Guide
26
This page is left blank.
Page 35
Vigor2132 Series User’s Guide
27
Q
Quuiicckk SSeettuupp
There are several setup wizards offered for you to configure the router simply and quickly.
Quick Start Wizard – used for building network connection, Internet access. Service Activation Wizard – used for activating the web content filter service. VPN Client Wizard – used for establishing VPN tunnel; the router is treated as a VPN
client.
VPN Server Wizard – used for establishing VPN tunnel; the router is treated as a VPN
server.
Wireless Wizard – used for building wireless LAN connection. VoIP Wizard – used for establishing VoIP profile.
22..11 QQuuiicckk SSttaarrtt WWiizzaarrdd
If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next.
Page 36
Vigor2132 Series User’s Guide
28
On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step.
PPPPPPooEE
1. Click PPPoE as the Internet Access Type. Then click Next to continue.
2. Detailed settings for PPPoE are shown as follows. Please manually enter the
Username/Password provided by your ISP.
Available settings are explained as follows:
Item Description Service Name
(Optional)
Enter the description of the specific network service.
Username
Assign a specific valid user name provided by the ISP. Note: The maximum length of the user name you can set is
63 characters.
Page 37
Vigor2132 Series User’s Guide
29
Password
Assign a valid password provided by the ISP. Note: The maximum length of the password you can set is 62
characters.
Confirm Password
Retype the password.
Back
Click it to return to previous setting page.
Next
Click it to get into the next setting page.
Cancel
Click it to give up the quick start wizard.
3. Click Next for viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 38
Vigor2132 Series User’s Guide
30
PPPPTTPP//LL22TTPP
1. Click PPTP/L2TP as the Internet Access Type. Then click Next to continue.
2. Detailed settings for PPTP are shown as follows.
Available settings are explained as follows:
Item Description Username
Assign a specific valid user name provided by the ISP.
Password
Assign a valid password provided by the ISP.
Confirm Password
Retype the password.
WAN IP Configuration
Obtain an IP address automatically – the router will get
an IP address automatically from DHCP server. Specify an IP address – you have to type relational
settings manually.
Page 39
Vigor2132 Series User’s Guide
31
IP Address - Type the IP address. Subnet Mask –Type the subnet mask. Gateway – Type the IP address of the gateway.
PPTP Server / L2TP Server
Type the IP address of the server.
Back
Click it to return to previous setting page.
Next
Click it to get into the next setting page.
Cancel
Click it to give up the quick start wizard.
3. Please type in the IP address/mask/gateway information originally provided by your ISP.
Then click Next for viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 40
Vigor2132 Series User’s Guide
32
SSttaattiicc IIPP
1. Click Static IP as the Internet Access type. Simply click Next to continue.
2. Detailed settings for Static IP are shown as follows.
Available settings are explained as follows:
Item Description WAN IP
Type the IP address.
Subnet Mask
Type the subnet mask.
Gateway
Type the IP address of gateway.
Primary DNS
Type in the primary IP address for the router.
Secondary DNS
Type in secondary IP address for necessity in the future.
Back
Click it to return to previous setting page.
Next
Click it to get into the next setting page.
Cancel
Click it to give up the quick start wizard.
Page 41
Vigor2132 Series User’s Guide
33
3. Please type in the IP address information originally provided by your ISP. Then click
Next for next step.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
DDHHCCPP
1. Click DHCP as the Internet Access type. Simply click Next to continue.
Page 42
Vigor2132 Series User’s Guide
34
2. Detailed settings for DHCP are shown as follows.
Available settings are explained as follows:
Item Description Host Name
Type the name of the host. Note: The maximum length of the host name you can set is
39 characters.
MAC
Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to enter the MAC address.
Back
Click it to return to previous setting page.
Next
Click it to get into the next setting page.
Cancel
Click it to give up the quick start wizard.
3. After finished the settings above, click Next for viewing summary of such connection.
Page 43
Vigor2132 Series User’s Guide
35
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 44
Vigor2132 Series User’s Guide
36
22..22 SSeerrvviiccee AAccttiivvaattiioonn WWiizzaarrdd
Service Activation Wizard can guide you to activate WCF service (Web Content Filter) with a quick and easy way. For the Service Activation Wizard is only available for admin
operation, therefore, please type “admin/admin” on Username/Password while Logging into the web user interface.
Service Activation Wizard is a tool which allows you to use trial version of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com
. For using
Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
Now, follow the steps listed below to activate WCF feature for your router.
Note: Such function is available only for Admin Mode.
1. Open Wizards>>Service Activation Wizard.
2. In the following page, you can activate the Web content filter services and APPE
Enforcement service at the same time or individually. When you finish the selection, please click Next.
Info
BPjM is web content filter (WCF) for German Speaking users. It is ideal for your family to provide more Internet security for youngsters.
Cryan 30-day trial is WCF which offers 30-day trial period. After trial, you can purchase DrayTek's prepared Cryan GlobalView WCF package from retailing outlets.
Page 45
Vigor2132 Series User’s Guide
37
3. Setting confirmation page will be displayed as follows, please click Activate.
Info
The service will be activated and applied as the default rule configured in Firewall>>General Setup.
4. Now, the web page will display the service that you have activated according to your
selection(s). The valid time for the free trial of these services is one month.
Page 46
Vigor2132 Series User’s Guide
38
22..33 VVPPNN CClliieenntt WWiizzaarrdd
Such wizard is used to configure VPN settings for VPN client. Such wizard will guide to set the LAN-to-LAN profile for VPN dial out connection (from server to client) step by step.
1. Open VPN and Remote Access>>VPN Client Wizard. The following page will appear.
Available settings are explained as follows:
Item Description LAN-to-LAN Client
Mode Selection
Choose the client mode. Route Mode/NAT Mode – If the remote network only
allows you to dial in with single IP, please choose this mode, otherwise please choose Route Mode.
Please choose a LAN-to-LAN Profile
There are 64 VPN profiles for users to set.
Page 47
Vigor2132 Series User’s Guide
39
2. When you finish the mode and profile selection, please click Next to open the following
page.
In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made.
Page 48
Vigor2132 Series User’s Guide
40
Note: The following descriptions for VPN Type are based on the Route Mode specified in LAN-to-LAN Client Mode Selection.
When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the
following graphic:
When you choose IPsec, you will see the following graphic:
Page 49
Vigor2132 Series User’s Guide
41
When you choose L2TP, you will see the following graphic:
When you choose L2TP over IPsec (Nice to Have) or L2TP over IPsec (Must), you
will see the following graphic:
Available settings are explained as follows:
Item Description Profile Name
Type a name for such profile. The length of the file is limited to 10 characters.
Always On
Check to enable router always keep VPN connection.
Page 50
Vigor2132 Series User’s Guide
42
Server IP/Host Name for VPN
Type the IP address of the server or type the host name for such VPN profile.
IKE Authentication Method
IKE Authentication Method usually applies to those are remote dial-in user or node (LAN to LAN) which uses dynamic IP address and IPsec-related VPN connections such as L2TP over IPsec and IPsec tunnel.
Pre-Shared Key- Specify a key for IKE authentication. Confirm Pre-Shared Key-Confirm the pre-shared key.
Digital Signature (X.509)
Click Digital Signature to invoke this function. Peer ID – Choose the peer ID selection from the drop down
list.
Local ID – Choose Alternative Subject Name First or Subject Name First.
Local Certificate – Use the drop down list to choose one of
the certificates for using. You have to configure one certificate at least previously in Certificate Management >> Local Certificate. Otherwise, the setting you choose here will not be effective.
IPsec Security Method
Medium - Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option is active.
High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES.
User Name
This field is used to authenticate for connection when you select PPTP or L2TP with or without IPsec policy above.
The length of the use name is limited to 11 characters.
Password
This field is used to authenticate for connection when you select PPTP or L2TP with or without IPsec policy above.
The length of the password is limited to 11 characters.
Remote Network IP
Please type one LAN IP address (according to the real location of the remote host) for building VPN connection.
Remote Network Mask
Please type the network mask (according to the real location of the remote host) for building VPN connection.
3. After finishing the configuration, please click Next. The confirmation page will be shown
as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action.
Page 51
Vigor2132 Series User’s Guide
43
Available settings are explained as follows:
Item Description Go to the VPN
Connection Management
Click this radio button to access VPN and Remote Access>>Connection Management for viewing VPN
Connection status.
Do another VPN Server Wizard Setup
Click this radio button to set another profile of VPN Server through VPN Server Wizard.
View more detailed configuration
Click this radio button to access VPN and Remote Access>>LAN to LAN for viewing detailed configuration.
Page 52
Vigor2132 Series User’s Guide
44
22..44 VVPPNN SSeerrvveerr WWiizzaarrdd
Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connection (from client to server) step by step.
1. Open VPN and Remote Access>>VPN Server Wizard. The following page will appear.
Available settings are explained as follows:
Item Description VPN Server Mode
Selection
Choose the direction for the VPN server. Site to Site VPN – To set a LAN-to-LAN profile
automatically, please choose Site to Site VPN. Remote Dial-in User –You can manage remote access by
maintaining a table of remote user profile, so that users can be authenticated to dial-in via VPN connection.
Please choose a LAN-to-LAN Profile
This item is available when you choose Site to Site VPN (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set.
Page 53
Vigor2132 Series User’s Guide
45
Please choose a Dial-in User Accounts
This item is available when you choose Remote Dial-in User (Teleworker) as VPN server mode. There are 32 VPN tunnels for users to set.
Allowed Dial-in Type
This item is available after you choose any one of dial-in user account profiles. Next, you have to select suitable dial-in type for the VPN server profile. There are several types provided here (similar to VPN Client Wizard).
Different Dial-in Type will lead to different configuration page. In addition, adjustable items for each dial-in type will be changed according to the VPN Server Mode (Site to Site VPN and Remote Dial-in User) selected.
2. After making the choices for the server profile, please click Next. You will see different
configurations based on the selection you made.
Here we take the examples of choosing Site-to-Site VPN as the VPN Server Mode.
Page 54
Vigor2132 Series User’s Guide
46
When you check PPTP, you will see the following graphic:
When you check PPTP & IPsec & L2TP (three types) or PPTP & IPsec (two types) or
L2TP with Policy (Nice to Have/Must), you will see the following graphic:
Page 55
Vigor2132 Series User’s Guide
47
When you check IPsec, you will see the following graphic:
Available settings are explained as follows:
Item Description Profile Name
Type a name for such profile. The length of the file is limited to 10 characters.
User Name
This field is used to authenticate for connection when you select PPTP or L2TP with or without IPsec policy above.
The length of the name is limited to 11 characters.
Password
This field is used to authenticate for connection when you select PPTP or L2TP with or without IPsec policy above.
The length of the name is limited to 11 characters.
Pre-Shared Key
For IPsec/L2TP IPsec authentication, you have to type a pre-shared key.
The length of the name is limited to 64 characters.
Confirm Pre-Shared Key
Type the pre-shared key again for confirmation.
Digital Signature (X.509)
Check the box of Digital Signature to invoke this function. Peer ID – Choose the peer ID selection from the drop down
list.
Local ID – Choose Alternative Subject Name First or Subject Name First.
Peer IP/VPN Client IP
Type the WAN IP address or VPN client IP address for the remote client.
Peer ID
Type the ID name for the remote client. The length of the name is limited to 47 characters.
Remote Network IP
Please type one LAN IP address (according to the real location of the remote host) for building VPN connection.
Page 56
Vigor2132 Series User’s Guide
48
Remote Network Mask
Please type the network mask (according to the real location of the remote host) for building VPN connection.
3. After finishing the configuration, please click Next. The confirmation page will be shown
as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action.
Available settings are explained as follows:
Item Description Go to the VPN
Connection Management
Click this radio button to access VPN and Remote Access>>Connection Management for viewing VPN
Connection status.
Do another VPN Server Wizard Setup
Click this radio button to set another profile of VPN Server through VPN Server Wizard.
View more detailed configuration
Click this radio button to access VPN and Remote Access>>LAN to LAN for viewing detailed configuration.
Page 57
Vigor2132 Series User’s Guide
49
22..55 WWiirreelleessss WWiizzaarrdd
The wireless wizard allows you to configure settings specified for a host AP (for home use or internal use for a company) and specified for a guest AP (for any wireless clients accessing into Internet).
Follow the steps listed below:
1. Open Wireless Wizard.
2. The screen of wireless wizard will be shown as follows. This page will be used for
internal users in a company or at home. Type the required data offered by your ISP.
Available settings are explained as follows:
Item Description Wireless 2.4GHz Settings Name
Type the SSID name of this router for wireless 2.4GHz. The default name is defined with DrayTek. Change the name if required.
Mode
At present, the router can connect to 11n Only, 11g Only, Mixed (11b+11g), Mixed (11a+11n), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mix (11b+11g+11n) mode.
Channel
Means the channel of frequency of the wireless LAN. The default channel is 6. You may switch channel if the selected
Page 58
Vigor2132 Series User’s Guide
50
channel is under serious interference. If you have no idea of choosing the frequency, please select Auto to let system determine for you.
Security Key
The wireless mode offered by this wizard is WPA2/PSK. The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via
802.1x authentication. Either 8~63 ASCII characters, such as 012345678(or 64
Hexadecimal digits leading by 0x, such as “0x321253abcde…”).
Use the same SSID and Security Key as above
Check the box to use the same settings configured above.
Wireless 5GHz Settings (not available for Vigor2132FVn) Name
Type the SSID name of this router for wireless 5GHz.
Mode
At present, the router can connect to 11a Only, 11n Only (5GHz), Mixed (11a+11n) and Mixed (11a+11n+11ac) stations simultaneously.
Channel
Means the channel of frequency of the wireless LAN. The default channel is 36. You may switch channel if the selected channel is under serious interference. If you have no idea of choosing the frequency, please select Auto to let system determine for you.
Security Key
The wireless mode offered by this wizard is WPA2/PSK. The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via
802.1x authentication. Either 8~63 ASCII characters, such as 012345678(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
Next
Click it to get into the next setting page.
Cancel
Exit the wireless wizard without saving any changes.
Note that, for the communication, all wireless devices must support the same encryption bit length and share the same key. If WEP mode is selected, only one of four preset keys can be selected at one time.
Page 59
Vigor2132 Series User’s Guide
51
3. After typing the required information, click Next. The settings in the page limit the
wireless station (guest) accessing into Internet but not being allowed to share the LAN network and VPN connection.
Available settings are explained as follows:
Item Description Wireless 2.4GHz Settings Enable/Disable
Click it to enable or disable settings in this page.
SSID
Type the SSID name of this router.
Security Key
The wireless mode offered by this wizard is WPA2/PSK. The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via
802.1x authentication. Either 8~63 ASCII characters, such as 012345678(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
Rate Control
It controls the data transmission rate through wireless connection.
Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps.
Download – Type the transmitting rate for data download. Default value is 30,000 kbps.
Wireless 5GHz Settings (not available for Vigor2132FVn) Enable/Disable
Click it to enable or disable settings in this page.
Use the same SSID and Security Key as above
Check the box to use the same settings configured above.
SSID
Type the SSID name of this router. (SSID2)
Page 60
Vigor2132 Series User’s Guide
52
Security Key
The wireless mode offered by this wizard is WPA2/PSK. The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via
802.1x authentication. Either 8~63 ASCII characters, such as 012345678(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
Rate Control
It controls the data transmission rate through wireless connection.
Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps.
Download – Type the transmitting rate for data download. Default value is 30,000 kbps.
Next
Click it to get into the next setting page.
Cancel
Exit the wireless wizard without saving any changes.
Note: Security Key(s) defined for Host AP and Guest AP must be different to avoid that guest accesses into internal server in a company.
4. After typing the required information, click Next.
5. The following page will display the configuration summary for wireless setting.
6. Click Finish to complete the wireless settings configuration.
Page 61
Vigor2132 Series User’s Guide
53
22..66 VVooIIPP WWiizzaarrdd
Vigor router offers a quick method to configure settings for VoIP application. Follow the steps listed below.
Note: This wizard is available for “V” model only.
1. Open Wizards>>VoIP Wizard.
2. The screen of VoIP Wizard will be shown as follows.
Available settings are explained as follows:
Item Description Set VoIP service
provider domain
VoIP service provider - Use the drop down list to choose
the ISP which offers the VoIP service for your router.
SIP Port – Use the default setting (5060).
Set Account quickly
Account Number/Name – Type the account number/name
registered to your ISP. Password – Type the password for the account registered to
your ISP. Use the same Account as phone 1 – If you don’t need to
configure Phone 2 settings, simply check this box.
Next
Click it to get into the next setting page.
Page 62
Vigor2132 Series User’s Guide
54
Cancel
Click it to give up the quick start wizard.
3. After finished the settings above, click Next for viewing summary of such connection.
4. Click Finish. A page of VoIP Wizard Setup OK!!! will appear.
Page 63
Vigor2132 Series User’s Guide
55
22..77 RReeggiisstteerriinngg VViiggoorr RRoouutteerr
You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the steps below to finish the router registration.
1 Please login the web configuration interface of Vigor router by typing “admin/admin
as User Name / Password.
2 Click Support Area>>Production Registration from the home page.
3 A Login page will be shown on the screen. Please type the account and password that
you created previously. And click Login.
Page 64
Vigor2132 Series User’s Guide
56
Notice: If you haven’t an accessing account, please refer to section 3.8 Creating an Account for MyVigor on User’s Guide to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account.
4 The following page will be displayed after you logging in MyVigor. From this page,
please click Product Registration or Add.
5 When the following page appears, please type in Nickname (for the router) and choose
the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit.
Page 65
Vigor2132 Series User’s Guide
57
6 When the following page appears, your router information has been added to the
database.
7 Now, you have finished the product registration. 8 After clicking OK, you will see the following page. Your router has been registered to
myvigor website successfully.
Page 66
Vigor2132 Series User’s Guide
58
This page is left blank.
Page 67
Vigor2132 Series User’s Guide
59
TTuuttoorriiaallss aanndd A
Apppplliiccaattiioonnss
33..11 HHooww ttoo ccoonnffiigguurree sseettttiinnggss ffoorr IIPPvv66 SSeerrvviiccee iinn VViiggoorr22113322FFVVnn
Due to the shortage of IPv4 address, more and more countries use IPv6 to solve the problem. However, to continually use the original rich resources of IPv4, both IPv6 and IPv4 networks shall communicate for each other via intercommunication mechanism to complete the shifting job from IPv4 to IPv6 gradually. At present, there are three common types of intercommunication mechanisms:
Dual Stack
The user can use both IPv4 and IPv6 techniques at the same time. That means adding an IPv6 stack on the origin network layer to let the host own the communication capability of IPv4 and IPv6.
Tunnel
Both IPv6 hosts can communication for each other via existing IPv4 network environment. The IPv6 packets will be encapsulated with the header of IPv4 first. Later, the packets will be transformed and judged by IPv4 router. Once the packets arrive the border between IPv4 and IPv6, the header of IPv4 on the packets will be removed. Then, the packets with IPv6 address will be forwarded to the destination of IPv6 network.
Translation
Such feature is active only for the user who uses IPv4 to communicate with other user using IPv4 service.
Before configuring the settings on Vigor2132FVn, you need to know which connection type that your IPv6 service used.
Note: For the IPv6 service, you have to configure WAN/LAN settings before using the service.
II.. CCoonnffiigguurriinngg tthhee WWAANN SSeettttiinnggss
For the IPv6 WAN settings for Vigor2132FVn, there are five connection types to be chosen: PPP, TSPC, AICCU, DHCPv6 Client and Static IPv6.
1. Access into the web user interface of Vigor2132FVn. Open WAN>> Internet Access.
Choose one of the WAN interfaces as the one supporting IPv6 service. Then, click the IPv6 button of the selected WAN.
Page 68
Vigor2132 Series User’s Guide
60
Note: Only one WAN interface support IPv6 service at one time. In this example, WAN2 is chosen as the one supporting IPv6 service.
2. In the following figure, use the drop down list to choose a proper connection type.
Different connection types will bring out different configuration page. Refer to the following:
PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same
time
Choose PPP and type the information for PPPoE of IPv4.
Access into the setting page for IPv6 service, it is not necessary for you to configure anything.
Page 69
Vigor2132 Series User’s Guide
61
Click OK and open Online Status. If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time.
Page 70
Vigor2132 Series User’s Guide
62
TSPC – Tunnel application, both IPv6 hosts communicate through IPv4 network
Choose TSPC and type the information for TSPC service.
Note: While using such mode, you have to make sure the IPv4 network connection is
normal.
(In the following figure, the TSPC information is obtained from http://gogo6.com/ after applied for the service.)
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Page 71
Vigor2132 Series User’s Guide
63
AICCU – Tunnel application
Choose AICCU and type the information for AICCU of IPv6.
Note: While using such mode, you have to make sure the IPv4 network connection is normal.
(In the following figure, the AICCU information is obtained from https://www.sixxs.net/main/
after applied for the service.)
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Page 72
Vigor2132 Series User’s Guide
64
DHCPv6 Client
Choose DHCPv6 Client. Click one of the identity associations and type the IAID number.
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Page 73
Vigor2132 Series User’s Guide
65
Static IPv6
Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address.
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Page 74
Vigor2132 Series User’s Guide
66
6in4 Static Tunnel
Choose 6in4 Static Tunnel. Type remote endpoint IPv4 address, 6in4 IPv6 Address, LAN Routed Prefix and Tunnel TTL.
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Page 75
Vigor2132 Series User’s Guide
67
6rd
Choose 6rd. Type IPv4 Border Relay, IPv4 Mask Length, 6rd Prefix and 6rd Prefix Length.
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Page 76
Vigor2132 Series User’s Guide
68
IIII.. CCoonnffiigguurriinngg tthhee LLAANN SSeettttiinnggss
After finished the WAN settings for IPv6, please configure the LAN settings to make the router’s client getting the IPv6 address.
1. Access into the web user interface of Vigor2132FVn. Open LAN>> General Setup.
Click the IPv6 button.
Note: Only the subnet of LAN1 supports IPv6 feature.
2. In the field of Router Advertisement Server, the default setting is Enable. The client’s
PC will ask router advertisement service for the Prefix of IPv6 address automatically, and generate an Interface ID by itself to compose a full and unique IPv6 address.
3. In the field of DHCPv6 Server Configuration, when DHCPv6 service is enabled, you
can assign available IPv6 address for the client manually.
Note: When both mechanisms are enabled, the client can determine which mechanism to be used (e.g., the default mechanism for Windows7 is router advertisement service).
Page 77
Vigor2132 Series User’s Guide
69
IIIIII.. CCoonnffiirrmmiinngg IIPPvv66 SSeerrvviiccee RRuunn SSuucccceessssffuullllyy
1. Make sure you have get the correct IPv6 IP address. Get into MS-DOS interface and type
the command of “ipconfig”. Refer to the following figure.
From the above figure we can see IPv6 IP address has been captured by the system.
2. Use the Ping command to ping any IPv6 address indicating an IPv6 website. For
example, www.kame.net
is a website supporting IPv4 IP and IPv6 IP services. Its IPv6
address is seen with a format of 2001:200:dff:fff1:216:3eff:feb1:44d7.
After getting the above message, it means the IPv6 service has been activated successfully.
Page 78
Vigor2132 Series User’s Guide
70
3. Connect to the website for IPv6. Open a web browser and type an URL of IPv6, e.g.,
www.kame.net
. If your computer accesses into the website by using IPv6 address, you
may see a turtle dancing on the screen. If not, only a steady turtle will be seen.
If you can see a turtle dancing on the screen, that means IPv6 service is ready for you to access and utilize.
Page 79
Vigor2132 Series User’s Guide
71
33..22 HHooww ccaann II ggeett tthhee ffiilleess ffrroomm UUSSBB ssttoorraaggee ddeevviiccee ccoonnnneeccttiinngg ttoo VViiggoorr rroouutteerr??
Files on USB storage device can be reviewed by opening USB Applicaiton>>File Explorer. If it is necessary for you to delete, copy files on the device or write, paste files to the devcie, it must be done through or FTP server.
1. Plug the USB device to the USB port on the router. Make sure Disk Connected appears
on the Connection Status as the figure shown below:
2. Setup a user account for the FTP service by using USB Application >>USB User
Management. Click Enable to enable FTP User account. Here we add a new account "user1" and assign authorities “Read”, “Write” and “List” to it.
3. Click OK to save the configuration.
4. Make sure the FTP service is running properly. Please open a browser and type
ftp://192.168.1.1
. Use the account "user1" to login.
Page 80
Vigor2132 Series User’s Guide
72
5. When the following screen appears, it means the FTP service is running properly.
6. Return to USB Application >> USB Disk Status. The information for FTP server will
be shown as below.
Now, users in LAN of Vigor2132FVn can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management.
Page 81
Vigor2132 Series User’s Guide
73
33..33 HHooww ttoo BBuuiilldd aa LLAANN--ttoo--LLAANN VVPPNN BBeettwweeeenn RReemmoottee OOffffiiccee aanndd HHeeaaddqquuaarrtteerr vviiaa IIPPSSeecc TTuunnnneell ((MMaaiinn MMooddee))
CCoonnffiigguurraattiioonn oonn VViiggoorr RRoouutteerr ffoorr HHeeaadd OOffffiiccee
1. Log into the web user interface of Vigor router.
2. Open VPN and Remote Access>>LAN to LAN to create a LAN-to-LAN profile.
3. Click any index number to open the configuration page. Type a name which is easy for
identification for such profile (in this case, type VPN Server), and check the box of Enable This Profile. For Vigor router will be set as a server, the call direction shall be set as Dial-in and set 0 as Idle Timeout.
Page 82
Vigor2132 Series User’s Guide
74
4. Now navigate to the next section, Dial-In Settings to check PPTP, IPSec Tunnel and
L2TP boxes. Check the box of Specify Remote… and type the Peer VPN Server IP (e.g., 218.242.130.19 in this case). Press the IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method.
5. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for remote
side.
6. Click OK to save the settings.
Page 83
Vigor2132 Series User’s Guide
75
7. Open VPN and Remote Access>>Connection Management to check the dial-in
connection status (from branch office).
CCoonnffiigguurraattiioonn oonn VViiggoorr RRoouutteerr ffoorr BBrraanncchh OOffffiiccee
1. Log into the web user interface of Vigor router.
2. Open VPN and Remote Access>>LAN to LAN to create a LAN-to-LAN profile. The
following settings are for a permanent VPN connection.
3. Click any index number to open the configuration page. Type a name which is easy for
identification for such profile (in this case, type VPN Client), and check the box of Enable This Profile. For such Vigor router will be set as a client, the call direction shall be set as Dial-out. Check the box of Always on for a permanent VPN connection.
Page 84
Vigor2132 Series User’s Guide
76
4. Now navigate to the next section, Dial-Out Settings to select the IPSec Tunnel service
and type the remote server IP/host name (e.g., 218.242.133.91, in this case). Press the IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method.
5. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for the
remote side.
6. Click OK to save the settings.
Page 85
Vigor2132 Series User’s Guide
77
7. Open VPN and Remote Access>>Connection Management to check the dial-in
connection status (from head office).
33..44 HHooww ttoo OOppttiimmiizzee tthhee BBaannddwwiiddtthh tthhrroouugghh QQooSS TTeecchhnnoollooggyy
Have you ever gotten any problems in uploading/downloading files (Voice, video or email/data only) with the narrow/districted bandwidth you may share from the common Internet connection line? The advanced bandwidth management technology-QoS (Quality of Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below.
Scenario: The Internet connection you got from ISP line is 2MB/512Kb. There are VoIP telephony network, IPTV set top box and data server at your home. Assume you want to allocate 30% of the bandwidth you got to VoIP demand, 50% for IPTV, 15% for mail/data, 5% for others. Let's see how easily it is to do the setting as below:
1.
Open Bandwidth Management>> Quality of Service.
2. You will get the following page. Click the Edit link for Class 1.
Page 86
Vigor2132 Series User’s Guide
78
3. In the following page, type a name (e.g., VoIP) for such class and click Add.
4. Check the box of ACT. Click Edit to specify the local address.
5. In the pop-up window, choose Range Address as the Address Type and type the start IP
address and end IP address in relational fields. Click OK to save the settings and exit the window.
6. Click OK again to save the settings.
Page 87
Vigor2132 Series User’s Guide
79
7. The class rule for VoIP has been set. Click OK to return to previous page.
8. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as
shown below.
and
Page 88
Vigor2132 Series User’s Guide
80
9. Assuming you get 2MB/512Kb Internet line. You can click the Setup link of WAN1 to
set up the bandwidth for different groups among VoIP, IPTV and Data/Email.
10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the
boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP Bandwidth Control.
11. Click OK to save the settings. The class rules for WAN1 are defined as shown below.
Page 89
Vigor2132 Series User’s Guide
81
33..55 QQooSS SSeettttiinngg EExxaammppllee
Assume a teleworker sometimes works at home and takes care of children. When working time, he would use Vigor router at home to connect to the server in the headquarter office downtown via either HTTPS or V PN to check email and access internal database. Meanwhile, children may chat on Skype in the restroom.
1. Go to Bandwidth Management>>Quality of Service.
2. Click Setup link of WAN. Make sure the QoS Control on the left corner is checked. And
select BOTH in Direction.
3. Set Inbound/Outbound bandwidth.
Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance.
Page 90
Vigor2132 Series User’s Guide
82
4. Return to previous page. Enter the Name of Index Class 1 by clicking Edit link. Type the
name “E-mail” for Class 1. Click OK to save the settings.
5. Click the Setup link for WAN. The user can set reserved bandwidth (e.g., 25%) for
E-mail using protocol POP3 and SMTP. Click OK to save the settings.
6. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this
index, the user will set reserved bandwidth for HTTPS. And click OK.
Page 91
Vigor2132 Series User’s Guide
83
7. Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic
influent other application. Click OK.
8. If the worker has connected to the headquarter using host to host VPN tunnel. (Please
refer to Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel.
9. Click Edit for Class 3 to open a new window. In this index, the user will set reserved
bandwidth for VPN.
Page 92
Vigor2132 Series User’s Guide
84
10. Click Add to open the following window. Check the ACT box, first.
11. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of
Remote Address to set headquarter’s IP address. Leave other fields and click OK.
Page 93
Vigor2132 Series User’s Guide
85
33..66 HHooww ttoo uussee LLaannddiinngg PPaaggee FFeeaattuurree
Landing Page is a special feature configured under User Management. It can specify the message, content to be seen or specify which website to be accessed into when users try to access into the Internet by passing the authentication. Here, we take Vigor2132 Series router as an example.
EExxaammppllee 1
1
UUsseerrss ccaann sseeee tthhee mmeessssaaggee ffoorr llaannddiinngg ppaaggee aafftteerr llooggggiinngg iinnttoo
IInntteerrnneett ssuucccceessssffuullllyy
1. Open the web user interface of Vigor2132FVn.
2. Open User Management -> General Setup to get the following page. In the field of
Landing Page, please type the words of “Login Success”. Please note that the maximum number of characters to be typed here is 255.
3. Now you can enable the Landing Page function. Open User Management -> User
Profile and click one of the index number (e.g., index number 3) links.
Page 94
Vigor2132 Series User’s Guide
86
4. In the following page, check the box of Landing page and click OK to save the settings.
5. Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and
asks for username and password. Please type the correct username and password.
6. Click Login. If the logging is successful, you will see the message of Login Success
from the browser you use.
Page 95
Vigor2132 Series User’s Guide
87
EExxaammppllee 2
2
TThhee ssyysstteemm wwiillll ccoonnnneecctt ttoo hhttttpp::////wwwwww..ddrraayytteekk..ccoomm
aauuttoommaattiiccaallllyy aafftteerr llooggggiinngg iinnttoo IInntteerrnneett ssuucccceessssffuullllyy
1. In the field of Landing Page, please type the words as below:
“ <body stats=1><script language='javascript'> window.location='http://www.draytek.com'</script></body>”
2. Next, enable the Landing Page function. Open User Management -> User Profile and
click one of the index number (e.g., index number 3) links.
Page 96
Vigor2132 Series User’s Guide
88
3. In the following page, check the box of Landing page and click OK to save the settings.
4. Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and
asks for username and password. Please type the correct username and password.
Page 97
Vigor2132 Series User’s Guide
89
5. Click Login. If the logging is successful, you will be directed into the website of
www.draytek.com
.
Page 98
Vigor2132 Series User’s Guide
90
33..77 HHooww ttoo SSeenndd aa NNoottiiffiiccaattiioonn ttoo SSppeecciiffiieedd PPhhoonnee NNuummbbeerr vviiaa SSMMSS SSeerrvviiccee iinn WWAANN DDiissccoonnnneeccttiioonn
Follow the steps listed below:
1. Log into the web user interface of Vigor router.
2. Configure relational objects first. Open Object Settings>>SMS/Mail Server Object to
get the following page.
Index 1 to Index 8 allows you to choose the built-in SMS service provider. If the SMS service provider is not on the list, you can configure Index 9 and Index 10 to add the new service provider to Vigor router.
3. Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider
setting. In the following page, type the username and password and set the quota that the router can send the message out.
Page 99
Vigor2132 Series User’s Guide
91
4. After finished the settings, click OK to return to previous page. Now you have finished
the configuration of the SMS Provider profile setting.
5. Open Object Settings>>Notification Object to configure the event conditions of the
notification.
6. Choose any index number (e.g., Index 1 in this case) to configure conditions for sending
the SMS. In the following page, type the name of the profile and check the Disconnected and Reconnected boxes for WAN to work in concert with the topic of this paper.
Page 100
Vigor2132 Series User’s Guide
92
7. After finished the settings, click OK to return to previous page. You have finished the
configuration of the notification object profile setting.
8. Now, open Application >> SMS / Mail Alert Service. Use the drop down list to choose
SMS Provider and the Notify Profile (specify the time of sending SMS). Then, type the phone number in the field of Recipient (the one who will receive the SMS).
9. Click OK to save the settings. Later, if one of the WAN connections fails in your router,
the system will send out SMS to the phone number specified. If the router has only one WAN interface, the system will send out SMS to the phone number while reconnecting the WAN interface successfully.
Loading...