DrayTek Vigor2133 operation manual

Download

Vigor2133 Series

Gigabit Broadband Router

User’s Guide

Version: 1.2

Firmware Version: V3.8.8

(For future update, please visit DrayTek web site)

Date: April 24, 2018

Vigor2133 Series User’s Guide

Copyrights

© All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.

Trademarks

The following trademarks are used in this document:

 Microsoft is a registered trademark of Microsoft Corp.  Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are trademarks of Microsoft Corp.  Apple and Mac OS are registered trademarks of Apple Inc.  Other products may be trademarks or registered trademarks of their respective manufacturers.

Safety Instructions



Read the installation guide thoroughly before you set up the router.

 The router is a complicated electronic unit that may be repaired only be authorized and qualified personnel.

Do not try to open or repair the router yourself.

 Do not place the router in a damp or humid place, e.g. a bathroom.  The router should be used in a sheltered area, within a temperature range of +5 to +40 Celsius.  Do not expose the router to direct sunlight or other heat sources. The housing and electronic components

may be damaged by direct sunlight or heat sources.

 Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards.  Keep the package out of reach of children.  When you want to dispose of the router, please follow local regulations on conservation of the environment.

Warranty

 We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship

or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.

Be a Registered Owner

 Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com.

Firmware & Tools Updates

 Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult

the DrayTek web site for more information on newest firmware, tools and documents.

More update, please visit www.draytek.com.

Vigor2133 Series User’s Guide

iii

TTaabbllee ooff CCoonntteennttss

Part I Installation.................................................................................................................i

I-1 Introduction ................................................................................................................................... 1

I-1-1 Indicators and Connectors .................................................................................................. 2

I-2 Hardware Installation .................................................................................................................... 4

I-2-1 Installing Vigor Router......................................................................................................... 4

I-2-2 Wall-Mounted Installation.................................................................................................... 5

I-2-3 Installing USB Printer to Vigor Router................................................................................. 6

I-3 Accessing Web Page.................................................................................................................. 13

I-4 Changing Password.................................................................................................................... 15

I-5 Dashboard................................................................................................................................... 16

I-5-1 Virtual Panel...................................................................................................................... 17

I-5-2 Name with a Link............................................................................................................... 17

I-5-3 Quick Access for Common Used Menu ............................................................................ 18

I-5-4 GUI Map ............................................................................................................................ 19

I-5-5 Web Console..................................................................................................................... 20

I-5-6 Config Backup................................................................................................................... 20

I-5-7 Logout................................................................................................................................ 21

I-5-8 Online Status..................................................................................................................... 21

I-5-8-1 Physical Connection......................................................................21

I-5-8-2 Virtual WAN ...............................................................................23

I-6 Quick Start Wizard...................................................................................................................... 24

I-7 Service Activation Wizard........................................................................................................... 33

I-8 Registering Vigor Router............................................................................................................. 35

Part II Connectivity ..........................................................................................................37

II-1 WAN........................................................................................................................................... 38

Web User Interface.................................................................................................................... 39

II-1-1 General Setup .................................................................................................................. 39

II-1-1-1 WAN1.......................................................................................39

II-1-1-2 WAN3 (USB) ...............................................................................42

II-1-2 Internet Access................................................................................................................. 43

II-1-2-1 Details Page for PPPoE..................................................................44

II-1-2-2 Details Page for Static or Dynamic IP.................................................47

II-1-2-3 Details Page for PPTP/L2TP............................................................50

II-1-2-4 Details Page for IPv6 – Offline.........................................................52

II-1-2-5 Details Page for IPv6 – PPP .............................................................52

II-1-2-6 Details Page for IPv6 – TSPC............................................................53

II-1-2-7 Details Page for IPv6 – AICCU ..........................................................55

II-1-2-8 Details Page for IPv6 – DHCPv6 Client................................................56

II-1-2-9 Details Page for IPv6 – Static IPv6.....................................................58

II-1-2-10 Details Page for IPv6 – 6in4 Static Tunnel..........................................59

II-1-2-11 Details Page for IPv6 – 6rd ............................................................61

II-1-3 Multi-VLAN ....................................................................................................................... 63

II-1-4 WAN Budget..................................................................................................................... 67

Vigor2133 Series User’s Guide

II-1-4-1 General Setup ............................................................................67

II-1-4-2 Status ......................................................................................70

Application Notes....................................................................................................................... 71

A-1 How to configure IPv6 on WAN interface?................................................71

II-2 LAN............................................................................................................................................ 76

Web User Interface.................................................................................................................... 78

II-2-1 General Setup .................................................................................................................. 78

II-2-1-1 Details Page for LAN1 – Ethernet TCP/IP and DHCP Setup........................81

II-2-1-2 Details Page for LAN2 ~ LAN4..........................................................83

II-2-1-3 Details Page for IP Routed Subnet ....................................................85

II-2-1-4 Details Page for LAN IPv6 Setup.......................................................86

II-2-1-5 Advanced DHCP Options ................................................................90

II-2-2 VLAN................................................................................................................................ 92

II-2-3 Bind IP to MAC................................................................................................................. 95

II-2-4 LAN Port Mirror................................................................................................................. 99

II-2-5 Wired 802.1x .................................................................................................................. 100

II-3 Hardware Acceleration............................................................................................................. 101

II-4 NAT .......................................................................................................................................... 103

Web User Interface..................................................................................................................104

II-4-1 Port Redirection.............................................................................................................. 104

II-4-2 DMZ Host ....................................................................................................................... 108

II-4-3 Open Ports ..................................................................................................................... 111

II-4-4 Port Triggering................................................................................................................ 114

II-4-5 ALG................................................................................................................................. 116

II-5 Applications...............................................................................................................................117

Web User Interface..................................................................................................................119

II-5-1 Dynamic DNS................................................................................................................. 119

II-5-2 LAN DNS / DNS Forwarding.......................................................................................... 123

II-5-3 DNS Security..................................................................................................................126

II-5-3-1 General Setup .......................................................................... 126

II-5-3-2 Domain Diagnose....................................................................... 126

II-5-4 Schedule......................................................................................................................... 128

II-5-5 RADIUS.......................................................................................................................... 131

II-5-6 UPnP.............................................................................................................................. 132

II-5-7 IGMP............................................................................................................................... 133

II-5-7-1 General Setting ........................................................................ 133

II-5-7-1 Working Group ......................................................................... 134

II-5-8 Wake on LAN ................................................................................................................. 135

II-5-9 SMS / Mail Alert Service................................................................................................. 136

II-5-9-1 SMS Alert................................................................................ 136

II-5-9-2 Mail Alert ............................................................................... 137

II-5-10 Bonjour......................................................................................................................... 138

Application Notes.....................................................................................................................141

A-1 How to use DrayDDNS?..................................................................... 141

A-2 How to Configure Customized DDNS?.................................................... 146

Vigor2133 Series User’s Guide

II-6 Routing..................................................................................................................................... 150

Web User Interface..................................................................................................................151

II-6-1 Static Route.................................................................................................................... 151

II-6-2 Route Policy ................................................................................................................... 155

II-6-2-1 General Setup .......................................................................... 155

II-6-2-2 Diagnose................................................................................. 159

Application Notes.....................................................................................................................162

A-1 How to set up Address Mapping with Route Policy? .................................. 162

Part III Wireless LAN ......................................................................................................165

III-1 Wireless LAN (2.4 GHz/5 GHz) .............................................................................................. 166

Web User Interface..................................................................................................................170

III-1-1 Wireless Wizard............................................................................................................. 170

III-1-2 General Setup ............................................................................................................... 174

III-1-3 Security.......................................................................................................................... 176

III-1-4 Access Control .............................................................................................................. 178

III-1-5 WPS............................................................................................................................... 179

III-1-6 WDS .............................................................................................................................. 181

III-1-7 Advanced Setting .......................................................................................................... 184

III-1-8 Station Control............................................................................................................... 187

III-1-9 AP Discovery................................................................................................................. 187

III-1-10 Bandwidth Management.............................................................................................. 189

III-1-11 Airtime Fairness........................................................................................................... 190

III-1-12 Band Steering.............................................................................................................. 192

III-1-13 Roaming...................................................................................................................... 196

III-1-14 Station List................................................................................................................... 197

Part IV VPN.....................................................................................................................199

IV-1 VPN and Remote Access....................................................................................................... 200

Web User Interface..................................................................................................................201

IV-1-1 VPN Client Wizard ........................................................................................................ 201

IV-1-2 VPN Server Wizard....................................................................................................... 207

IV-1-3 Remote Access Control ................................................................................................ 211

IV-1-4 PPP General Setup....................................................................................................... 212

IV-1-5 IPsec General Setup..................................................................................................... 214

IV-1-6 IPsec Peer Identity........................................................................................................ 215

IV-1-7 Remote Dial-in User...................................................................................................... 217

IV-1-8 LAN to LAN................................................................................................................... 220

IV-1-9 Connection Management.............................................................................................. 230

Application Notes.....................................................................................................................231

A-1 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec

Tunnel (Main Mode)............................................................................. 231

IV-2 SSL VPN................................................................................................................................. 236

Vigor2133 Series User’s Guide

Web User Interface..................................................................................................................237

IV-2-1 General Setup............................................................................................................... 237

IV-2-2 User Account................................................................................................................. 238

IV-2-3 Online User Status........................................................................................................ 242

IV-3 Certificate Management..........................................................................................................243

Web User Interface..................................................................................................................244

IV-3-1 Local Certificate ............................................................................................................ 244

IV-3-2 Trusted CA Certificate................................................................................................... 248

IV-3-3 Certificate Backup......................................................................................................... 250

Part V Security...............................................................................................................251

V-1 Firewall.....................................................................................................................................252

Web User Interface..................................................................................................................254

V-1-1 General Setup................................................................................................................ 254

V-1-2 Filter Setup..................................................................................................................... 259

V-1-3 DoS Defense.................................................................................................................. 270

V-1-4 Diagnose........................................................................................................................ 274

Application Notes.....................................................................................................................277

A-1 How to Configure Certain Computers Accessing to Internet........................ 277

V-2 Central Security Management (CSM)...................................................................................... 281

Web User Interface..................................................................................................................282

V-2-1 APP Enforcement Profile ............................................................................................... 282

V-2-2 URL Content Filter Profile.............................................................................................. 286

V-2-3 Web Content Filter Profile.............................................................................................. 290

V-2-4 DNS Filter Profile ........................................................................................................... 294

Application Notes.....................................................................................................................296

A-1 How to Create an Account for MyVigor ................................................. 296

A-2 How to Block Facebook Service Accessed by the Use rs via W e b Cont ent Fil ter / UR L

Content Filter.................................................................................... 304

Part VI Management ......................................................................................................311

VI-1 System Maintenance.............................................................................................................. 312

Web User Interface..................................................................................................................313

VI-1-1 System Status...............................................................................................................313

VI-1-2 TR-069 .......................................................................................................................... 315

VI-1-3 Administrator Password................................................................................................ 318

VI-1-4 User Password.............................................................................................................. 320

VI-1-5 Login Page Greeting..................................................................................................... 323

VI-1-6 Configuration Backup.................................................................................................... 325

VI-1-7 Syslog/Mail Alert ........................................................................................................... 329

VI-1-8 Time and Date............................................................................................................... 332

VI-1-9 SNMP............................................................................................................................ 333

VI-1-10 Management............................................................................................................... 335

Vigor2133 Series User’s Guide

vii

VI-1-11 Panel Control .............................................................................................................. 339

VI-1-12 Self-Signed Certificate ................................................................................................ 343

VI-1-13 Reboot System............................................................................................................ 345

VI-1-14 Firmware Upgrade ...................................................................................................... 346

VI-1-15 Activation..................................................................................................................... 347

VI-2 Bandwidth Management......................................................................................................... 349

Web User Interface..................................................................................................................351

VI-2-1 Sessions Limit...............................................................................................................351

VI-2-2 Bandwidth Limit............................................................................................................. 353

VI-2-3 Quality of Service.......................................................................................................... 355

VI-2-4 APP QoS....................................................................................................................... 362

Application Notes.....................................................................................................................364

A-1 How to Optimize the Bandwidth through QoS Technology .......................... 364

VI-3 Hotspot Web Portal................................................................................................................. 368

Web User Interface..................................................................................................................369

VI-3-1 Profile Setup.................................................................................................................. 369

VI-4-1-1 Login Modes............................................................................ 369

VI-4-1-2 Steps for Configuring a Web Portal Profile....................................... 372

Application Notes.....................................................................................................................384

A-1 How to create Facebook APP for Web Portal Authentication?...................... 384

A-2 How to create Google APP for Web Portal Authentication?......................... 390

VI-4 Central Management (AP)...................................................................................................... 392

Web User Interface..................................................................................................................393

VI-4-1 Status............................................................................................................................ 393

VI-4-2 WLAN Profile................................................................................................................. 395

VI-4-3 AP Maintenance............................................................................................................ 400

VI-4-4 Traffic Graph................................................................................................................. 401

VI-4-5 Load Balance................................................................................................................ 402

VI-4-6 Function Support List.................................................................................................... 403

VI-5 Central Management (External Devices) ............................................................................... 404

VI-5-1 All Devices .................................................................................................................... 404

Part VII Others................................................................................................................407

VII-1 Objects Settings..................................................................................................................... 408

Web User Interface..................................................................................................................409

VII-1-1 IP Object ...................................................................................................................... 409

VII-1-2 IP Group....................................................................................................................... 413

VII-1-3 IPv6 Object................................................................................................................... 414

VII-1-4 IPv6 Group...................................................................................................................416

VII-1-5 Service Type Object..................................................................................................... 417

VII-1-6 Service Type Group..................................................................................................... 419

VII-1-7 Keyword Object............................................................................................................ 421

viii

Vigor2133 Series User’s Guide

VII-1-8 Keyword Group............................................................................................................ 423

VII-1-9 File Extension Object................................................................................................... 424

VII-1-10 SMS/Mail Service Object........................................................................................... 426

VII-1-11 Notification Object...................................................................................................... 431

VII-1-12 String Object .............................................................................................................. 433

Application Notes.....................................................................................................................434

A-1 How to Send a Notification to Specified Phone Number via SMS Service in WAN

Disconnection .................................................................................... 434

VII-2 USB Application..................................................................................................................... 438

Web User Interface..................................................................................................................439

VII-2-1 USB General Settings.................................................................................................. 439

VII-2-2 USB User Management............................................................................................... 440

VII-2-3 File Explorer................................................................................................................. 442

VII-2-4 USB Device Status....................................................................................................... 443

VII-2-5 Temperature Sensor.................................................................................................... 444

VII-2-6 Modem Support List..................................................................................................... 446

VII-2-7 SMB Client Support List............................................................................................... 447

Application Notes.....................................................................................................................448

A-1 How can I get the files from USB storage device connecting to Vigor router? ... 448

Part VIII Troubleshooting ..............................................................................................451

VIII-1 Diagnostics........................................................................................................................... 452

Web User Interface..................................................................................................................453

VIII-1-1 Dial-out Triggering....................................................................................................... 453

VIII-1-2 Routing Table.............................................................................................................. 454

VIII-1-3 ARP Cache Table ....................................................................................................... 455

VIII-1-4 IPv6 Neighbour Table ................................................................................................. 456

VIII-1-5 DHCP Table................................................................................................................ 457

VIII-1-6 NAT Sessions Table ................................................................................................... 458

VIII-1-7 DNS Cache Table....................................................................................................... 459

VIII-1-8 Ping Diagnosis............................................................................................................ 460

VIII-1-9 Data Flow Monitor....................................................................................................... 461

VIII-1-10 Traffic Graph............................................................................................................. 463

VIII-1-11 Trace Route .............................................................................................................. 464

VIII-1-12 Syslog Explorer......................................................................................................... 465

VIII-1-13 IPv6 TSPC Status..................................................................................................... 466

VIII-1-14 DoS Flood Table....................................................................................................... 467

VIII-1-15 Route Policy Diagnosis............................................................................................. 469

VIII-2 Checking If the Hardware Status Is OK or Not..................................................................... 471

VIII-3 Checking If the Network Connection Settings on Your Computer Is OK or Not................... 472

VIII-4 Pinging the Router from Your Computer .............................................................................. 475

VIII-5 Checking If the ISP Settings are OK or Not ......................................................................... 477

Vigor2133 Series User’s Guide

VIII-6 Backing to Factory Default Setting If Necessary.................................................................. 478

VIII-7 Contacting DrayTek.............................................................................................................. 479

Appendix I: VLAN Applications on Vigor Router ............................................................................ 480

Part IX Telnet Commands..............................................................................................489

Accessing Telnet of Vigor2133....................................................................................................... 490

Index ...............................................................................................................................688

Vigor2133 Series User’s Guide

Paarrtt II II

nssttaallllaattii

This part will introduce Vigor router and guide to install the device in hardware and software.

II--11 IInnttrroodduuccttiioonn

TThhiiss iiss aa ggeenneerriicc IInntteerrnnaattiioonnaall vveerrssiioonn ooff tthhee uusseerr gguuiiddee.. SSppeecciiffiiccaattiioonn,, ccoommppaattiibbiilliittyy aanndd ffeeaattuurreess vvaarryy bbyy rreeggiioonn.. FFoorr ssppeecciiffiicc uusseerr gguuiiddeess ssuuiittaabbllee ffoorr yyoouurr rreeggiioonn oorr pprroodduucctt,, pplleeaassee ccoonnttaacctt llooccaall ddiissttrriibbuuttoorr..

Vigor2133 series integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth.

By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly, and offers several protocols (such as IPSec/PPTP/L2TP) with VPN tunnels.

The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set firewall policy with ease. CSM (Content Security Management) provides users control and management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before. By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security outside and control inside. Object-based firewall is flexible and allows your network be safe.

User Management implemented on your router firmware can allow you to prevent any computer from accessing your Internet connection without a username or password. You can also allocate time budgets to your employees within office network.

With the 6-port Gigabit switch on the LAN side provides extremely high speed connectivity for the highest speed local data transfer of any server or local PCs. The tagged VLANs (IEEE802.1Q) can mark data with a VLAN identifier. This identifier can be carried through an onward Ethernet switch to specific ports. The specific VLAN clients can al so pick up this identifier as it is just passed to the LAN. You can set the priorities for LAN-side QoS. You can assign each of VLANs to each of the different IP subnets that the router may also be operating, to provide even more isolation.

On the Wireless-equipped models each of the wireless SSIDs can also be grouped within one of the VLANs.

Vigor2133 series provides two-level management to simplify the configuration of network connection. The user mode allows user accessing into WEB interfa ce via simple configuration . However, if users want to have advanced configurations, they can access into WEB interface through admin mode.

Vigor2133 Series User’s Guide

II--11--11 IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss

Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.

LED Status Explanation

Blinking The router is powered on and running normally.

(Activity)

USB

WLAN

WAN

Blinking When ACT and WLAN LEDs blink quickly and

simultaneously is enabled and the system waits for

wireless station of connection. Off The router is powered off. On The phone connected to this port is off-hook. Off The phone connected to this port is on-hook. Blinking A phone call comes. On A USB device is connected and active. Blinking The data is transmitting. On Wireless access point is ready. Blinking Ethernet packets are transmitting over wireless LAN. Blinking When ACT and WLAN LEDs blink quickly and

simultaneously is enabled and the system waits for

wireless station of connection. Off The WLAN function is inactive. On Internet connection is ready. Blinking The data is transmitting. Off Internet connection is not ready. On The WAN port is connected with Ethernet cable. Blinking The data is transmitting through WAN port. Off The WAN port is disconnected. On The LAN port is connected. Blinking The data is transmitting. Off The LAN port is disconnected.

Vigor2133 Series User’s Guide

LAN1/2/3/4

Interface Description

Factory Reset Restore the default settings.

Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration.

Wireless LAN ON/OFF/WPS

(for “n / ac” model)

USB1~USB2 Connector for a USB device (for 3G/4G USB Modem or printer). GigaLAN1~LAN4 Connectors for local networked devices. WAN Connector for remote networked devices. Phone2/Phone1

(for “V” model)

WLAN On - Press the button and release it within 2 seconds. When the wireless function is ready, the green LED will be on.

WLAN Off - Press the button and release it within 2 seconds to turn off the WLAN function. When the wireless function is not ready, the LED will be off.

WPS - When WPS function is enabled by web user interface, press this button for mor e t h a n 2 seconds to wait for cl ient’s device m aki ng network connection through WPS.

Connector of analog phone for VoIP communication.

ON/OFF Power Switch. PWR Connector for a power adapter.

Vigor2133 Series User’s Guide

II--22 HHaarrddwwaarree IInnssttaallllaattiioonn

II--22--11 IInnssttaalllliinngg VViiggoorr RRoouutteerr

Before starting to configure the router, you have to connect your devices correctly. In this section, Vigor2133n is taken as an example.

1. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router with Ethernet cable (RJ-45).

2. Connect one port of 4-port switch to your computer with a RJ-45 cable. This device allows you to connect 4 PCs directly.

3. Connect detachable antennas to the router (for n/ac model only).

4. Connect one end of the power cord to the power port of this device. Connect the other end to the wall outlet of electricity.

5. Power on the router.

6. Check the ACT and WAN, LAN LEDs to assure network connection.

(For the hardware connection, we take “n” model as an example.)

Vigor2133 Series User’s Guide

II--22--22 WWaallll--MMoouunntteedd IInnssttaallllaattiioonn

Vigor2133 has keyhole type mounting slots on the underside.

1. A template is provided on the Vigor2133 packaging box to enable you to space the screws

correctly on the wall.

2. Place the template on the wall and drill the holes according to the recommended

instruction.

3. Fit screws into the wall using the appropriate type of wall plug.

Note

4. When you finished about procedure, the router has been mounted on the wall firmly.

The recommended drill diameter shall be 6.5mm (1/4”).

Vigor2133 Series User’s Guide

II--22--33 IInnssttaalllliinngg UUSSBB PPrriinntteerr ttoo VViiggoorr RRoouutteerr

You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made ba sed on Windows 7. For other Windows system, please visit www.DrayTek.com.

Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).

1. Connect the printer with the router through USB/parallel port.

2. Open All Programs>>Getting Started>>Devices and Printers.

3. Click Add a printer.

Vigor2133 Series User’s Guide

4. A dialog will appear. Click Add a local printer and click Next.

5. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next.

Vigor2133 Series User’s Guide

6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next.

7. Click Standard and choose Generic Network Card.

Vigor2133 Series User’s Guide

8. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next.

9. Type a name for the chosen printer. Click Next.

Vigor2133 Series User’s Guide

10. Choose Do not share this printer and click Next.

11. Then, in the following dialog, click Finish.

Vigor2133 Series User’s Guide

12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties.

13. Edit the property of the new printer you have added by clicking Configure Port.

Vigor2133 Series User’s Guide

14. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name.

The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router.

Info

Some printers with the fax/scanning or other additional functions are not supported.

Vigor router supports printing request from computers via LAN ports but not WAN port.

Vigor2133 Series User’s Guide

II--33 AAcccceessssiinngg WWeebb PPaaggee

1. Make sure your PC connects to the router correctly.

You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section - Trouble Shooting of the guide.

2. Open a web browser on your PC and type http://192.168.1.1. The following window will be open to ask for username and password.

3. Please type “admin/admin” as the Username/Password and click Login.

Info

If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem.

Vigor2133 Series User’s Guide

4. Now, the Main Screen will appear. Take Vigor2133Vac as as example.

Info

The home page will be different slightly in accordance with the type of the router you have.

5. The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity.

Vigor2133 Series User’s Guide

II--44 CChhaannggiinngg PPaasssswwoorrdd

Please change the password for the original security of the router.

1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password.

2. Please type “admin/admin” as Username/Password for acce ssing into the web user interface with admin mode.

3. Go to System Maintenance page and choose Administrator Password.

4. Enter the login password (the default is “admin”) on the field of Old Password. Type

New Password and Confirm Password. Then click OK to continue.

Info

5. Now, the password has been changed. Next time, use the new password to access the Web user interface for this router.

Info

The maximum length of the password you can set is 23 characters.

Even the password is changed, the Username for logging onto the web user interface is still “admin”.

Vigor2133 Series User’s Guide

II--55 DDaasshhbbooaarrdd

Dashboard shows the connection status including System Information, IPv4 In ternet Access, IPv6 Internet Access, Interface (physical connection), Security and Quick Access.

Click Dashboard from the main menu on the left side of the main page.

A web page with default selections will be displayed on the screen. Refer to the following figure:

Vigor2133 Series User’s Guide

II--55--11 VViirrttuuaall PPaanneell

On the top of the Dashboard, a virtual panel (simulating the physical panel of the router) displays the physical interface connection. It will be refreshed every five seconds. When you move and click the mouse cursor on LEDs (except ACT), USB ports, or LAN1 – LAN4, related web setting page will be open for you to configure if required.

Port Color Description

Black It means the router or the function is not working. LED (left

side)

Green It means the router or the function is working. Black It means no USB device is connected. USB Green It means a USB device is connected.

Ethernet Port (WAN/LAN)

For detailed information about the LED display, refer to I-1-1 LED Indicators and Connectors.

II--55--22 NNaammee wwiitthh aa LLiinnkk

A name with a link (e.g., Router Name, Current Time, WAN1 and etc.) below means you can click it to open the configuration page for modification.

Black It means such port is disconnected. Green It means such port is connected (with Giga trans mission

rate, 1Gbps) physically.

Orange It means such port is connected (with 10/100 Mbps)

physically.

Vigor2133 Series User’s Guide

II--55--33 QQuuiicckk AAcccceessss ffoorr CCoommmmoonn UUsseedd MMeennuu

All the menu items can be accessed and arranged orderly on the left side of the main page for your request. However, some important and common used menu items which can be accessed in a quick way just for convenience.

Look at the right side of the Dashboard. You will find a group of common used functions grouped under Quick Access.

The function links of System Status, Dynamic DDNS, TR-069, IM/P2P Block, Schedule, Syslog/Mail Alert, RADIUS, Firewall Object Setting and Data Flow Monitor are displayed here. Move your mouse cursor on any one of the links and click on it. The corresponding setting page will be open immediately.

In addition, quick access for VPN security settings such as Remote Dial-in User and LAN to LAN are located on the bottom of this page. Scroll down the page to find them and use them if required.

Note that there is a plus ( it to review the LAN/WLAN/VPN/MyVigor connection(s) used presently.

) icon located on the left side of LAN/WLAN/VPN/MyVigor. Click

Vigor2133 Series User’s Guide

Host connected physically to the router via LAN port(s) will be displayed with green circles in the field of Connected.

All of the hosts (including wireless clients) displayed with Host ID, IP Address and MAC address indicates that the traffic would be transmitted through LAN port(s) and then the WAN port. The purpose is to perform the traffic monitor of the host(s).

II--55--44 GGUUII MMaapp

All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions.

Vigor2133 Series User’s Guide

II--55--55 WWeebb CCoonnssoollee

It is not necessary to use the telnet command via DOS prompt. The changes made by using web console have the same effects as modified through web user interface. The functions/settings modified under Web Console also can be reviewed on the web user interface.

Click the Web Console icon on the top of the main screen to open the following screen.

II--55--66 CCoonnffiigg BBaacckkuupp

There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup.

Simply click the icon on the top of the main screen and a pop up dialog will appear. Click Save to store the setting.

Vigor2133 Series User’s Guide

II--55--77 LLooggoouutt

Click this icon to exit the web user interface.

II--55--88 OOnnlliinnee SSttaattuuss

II--55--88--11 PPhhyyssiiccaall CCoonnnneeccttiioonn

Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on.

PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv44 PPrroottooccooll

Vigor2133 Series User’s Guide

PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv66 PPrroottooccooll

Detailed explanation (for IPv4) is shown below:

Item Description LAN Status Primary DNS-Displays the primary DNS server address for

WAN interface. Secondary DNS -Displays the secondary DNS server address

for WAN interface.

IP Address-Displays the IP address of the LAN interface. TX Packets-Displays the total transmitted packets at the LAN

interface. RX Packets-Displays the total received packets at the LAN

interface.

WAN1/WAN2/WAN3 /WAN4 Status

Enable – Yes in red means such interface is available but not enabled. Yes in green means such interface is enabled.

Line – Displays the physical connection (VDSL, ADSL,

Ethernet, or USB) of this interface.

Name – Display the name of the router. Mode - Displays the type of WAN connection (e.g., PPPoE). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. GW IP - Displays the IP address of the default gateway. TX Packets - Displays the total transmitted packets at the

WAN interface. TX Rate - Displays the speed of transmitted octets at the

WAN interface. RX Packets - Displays the total number of received packets

at the WAN interface. RX Rate - Displays the speed of received octets at the WAN

interface.

Detailed explanation (for IPv6) is shown below:

Vigor2133 Series User’s Guide

Item Description LAN Status IP Address- Displays the IPv6 address of the LAN interface..

TX Packets-Displays the total transmitted packets at the LAN

interface. RX Packets-Displays the total received packets at the LAN

interface. TX Bytes - Displays the speed of transmitted octets at the

LAN interface. RX Bytes - Displays the speed of received octets at the LAN

interface.

WAN IPv6 Status Enable – No in red means such interface is available but not

enabled. Yes in green means such inte rface is enabled. No in red means such interface is not available.

Mode - Displays the type of WAN connection (e.g., TSPC). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. Gateway IP - Displays the IP address of the default gateway.

Info

The words in green mean that the WAN connection of that interface is ready for accessing Internet; the words in red mean that the WAN connection of that interface is not ready for accessing Internet.

II--55--88--22 VViirrttuuaall WWAANN

Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, and so on. The field of Application will list the purpose of such WAN connection.

Vigor2133 Series User’s Guide

II--66 QQuuiicckk SSttaarrtt WWiizzaarrdd

Quick Start Wizard can help you to deploy and use the router easily and quickly. Go to Wizards>>Quick Start Wizard. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next.

On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step.

Vigor2133 Series User’s Guide

PPPPPPooEE

1. If you click PPPoE as the protocol, after clicking Next, you will get the following web page. Please manually enter the Username/Password provided by your ISP. Then click Next.

Available settings are explained as follows:

Item Description Service Name

(Optional) Username Assign a specifi c valid user name provided by the ISP.

Password Assign a valid password provided by the ISP.

Confirm Password Retype the password. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard.

Enter the description of the specific network service.

Note: The maximum length of the user name you can set is 63 characters.

Note: The maximum length of the password you can set is 62 characters.

Vigor2133 Series User’s Guide

2. Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection.

3. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

4. Now, you can enjoy surfing on the Internet.

Vigor2133 Series User’s Guide

PPPPTTPP//LL22TTPP

1. Choose PPTP/L2TP as the WAN Interface and click the Next button.

2. The following page will be open for you to type in all the information originally prov ided by your ISP.

Available settings are explained as follows:

Item Description Username Assign a specific valid user name provided by the ISP.

Note: The maximum length of the user name you can set is

63 characters.

Password Assign a valid password provided by the ISP.

Note: The maximum length of the password you can set is 62

characters.

Confirm Password Retype the password. WAN IP Configuration Obtain an IP address automatically – the router will get an

IP address automatically from DHCP server. Specify an IP address – you have to type relational settings

Vigor2133 Series User’s Guide

manually.

IP Address - Type the IP address. Subnet Mask –Type the subnet mask.

Gateway – Type the IP address of the gateway.

PPTP Server / L2TP

Type the IP address of the server.

Server Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard.

3. Please type in the IP address/mask/gateway information originally provided by your ISP. Then click Next for viewing summary of such connection.

4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

5. Now, you can enjoy surfing on the Internet.

Vigor2133 Series User’s Guide

SSttaattiicc IIPP

1. Click Static IP as the Internet Access type and click the Next button.

2. The following page will be open for you to type in the IP address information originally provided by your ISP.

Available settings are explained as follows:

Item Description WAN IP Type the IP address. Subnet Mask Type the subnet mask. Gateway Type the IP address of gateway. Primary DNS Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Next Click it to get into the next setting page.

Vigor2133 Series User’s Guide

Cancel Click it to give up the quick start wizard.

3. Please type in the IP address information originally provided by your ISP. Then click Next for next step.

4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

5. Now, you can enjoy surfing on the Internet.

DDHHCCPP

1. Click DHCP as the Internet Access type and click the Next button.

Vigor2133 Series User’s Guide

2. The following page will be open for you to type in the IP address information originally provided by your ISP.

Available settings are explained as follows:

Item Description Host Name Type the name of the host.

Note: The maximum length of the host name you can set is

39 characters.

MAC Some Cable service providers specify a specific MAC address

for access authentication. In such cases you need to enter the MAC address.

Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard.

3. After finished the settings above, click Next for viewing summary of such connection.

Vigor2133 Series User’s Guide

4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

5. Now, you can enjoy surfing on the Internet.

Vigor2133 Series User’s Guide

II--77 SSeerrvviiccee AAccttiivvaattiioonn WWiizzaarrdd

Service Activation Wizard can guide you to activate WCF service (Web Content Filter) with a quick and easy way. For the Service Activation Wizard is only available for admin

operation, please type “admin/admin” on Username/Password while Logging into the web user interface.

Service Activation Wizard is a tool which allows you to activate services without accessing into the server (MyVigor) located on http://myvigor.draytek.com.

Info

1. Open Wizards>>Service Activation Wizard.

Such function is available only for Admin Mode.

2. In the following page, you can activate the Web content filter services and APPE Enforcement service at the same time or individually. When you finish the selection, please click Next.

Info

Vigor2133 Series User’s Guide

BPjM is web content filter (WCF) for German Speaking users. It is ideal for your

family to provide more Internet security for youngsters. Cryan 30-day trial is WCF which offers 30-day trial period. After trial, you can

purchase DrayTek's prepared Cryan GlobalView WCF package from retailing outlets.

DT-APPE, developed by DrayTek, offers a mechanism to upgrade APPE signature automatically.

3. Setting confirmation page will be displayed as follows, please click Activate.

Info

The service will be activated and applied as the default rule configured in Firewall>>General Setup.

4. Now, the web page will display the service that you have activated according to your selection(s). The valid time for the free trial of these services is one month.

Vigor2133 Series User’s Guide

II--88 RReeggiisstteerriinngg VViiggoorr RRoouutteerr

You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the steps below to finish the router registration.

1 Please login the web configuration interface of Vigor router by typing “admin/admin” as

User Name / Password.

2 Click Support Area>>Production Registration from the home page.

3 A Login page will be shown on the screen. Please type the account and password that

you created previously. And click Login.

Info

If you haven’t an accessing account, please refer to section Creating an Account for MyVigor to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account.

Vigor2133 Series User’s Guide

4 The following page will be displayed after you logging in MyVigor. When the following

page appears, please type in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). Click Add.

5 When the following page appears, your router information has been added to the

database.

6 After clicking OK, you will see the following page. Your router has been registered to

myvigor website successfully.

Vigor2133 Series User’s Guide

Paarrtt IIII

neeccttiivviittyy

It means wide area network. Public IP will be used in WAN.

It means local area network. Private IP will be used in LAN. Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP.

When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network.

DNS, LAN DNS, IGMP, UPnP, WOL, RADIUS, SMS.

Static Route, Route Policy

Vigor2133 Series User’s Guide

IIII--11 WWAANN

It allows users to access Internet.

BBaassiiccss ooff IInntteerrnneett PPrroottooccooll ((IIPP)) NNeettwwoorrkk

IP means Internet Protocol. Every device in an IP-based Network including routers, print server, and host PCs, needs an IP address to identify its location on the network. To avoid address conflicts, IP addresses are publicly registered with the Network Information Centre (NIC). Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP/IP local area networks (LANs), such as host PCs under the management of a router since they do not need to be accessed by the public. Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges:

WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss

As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts. Meanwhile, Vigor router will communicate with other network devices through a public IP address. When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network. Thus, all the host PCs can share a common Internet connection.

From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255

GGeett YYoouurr PPuubblliicc IIPP AAddddrreessss ffrroomm IISSPP

In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is required for bridging customer premises equipment (CPE). Point to Point Protocol over Ethernet (PPPoE) connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator. This implementation provides users with significant ease of use. Meanwhile it provides access control, billing, and type of service according to user requirement.

When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP.

Vigor2133 Series User’s Guide

WWeebb UUsseerr IInntteerrffaaccee

IIII--11--11 GGeenneerraall SSeettuupp

This section will introduce some general settings of Internet and explain the connection modes for WAN in details.

IIII--11--11--11 WWAANN1

This webpage allows you to set general setup for WAN1and WAN3 respectively.

Available settings are explained as follows:

Item Description Index Click the WAN interface link under Index to access into the

WAN configuration page.

Enable V means such WAN interface is enabled and ready to be used. Physical Mode / Type Display the physical mode and physical type of such WAN

interface.

Active Mode Display whether such WAN interface is Active device or

backup device.

Load Balance Display if Load Balance feature is enabled or disabled for

such WAN interface.

Info

Click WAN1 link to get the following page:

In default, each WAN port is enabled.

Vigor2133 Series User’s Guide

Available settings are explained as follows:

Item Description Enable Choose Yes to invoke the settings for this WAN interface.

Choose No to disable the settings for this WAN interface. Display Name Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. Physical Type You can change the physical type for WAN2 or choose Auto

negotiation for determined by the system.

VLAN Tag insertion Enable – Enable the function of VLAN with tag.

The router will add specific VLAN number to all packets on

the WAN while sending them out.

Please type the tag value and specify the priority for the

Vigor2133 Series User’s Guide

packets sending by WAN interface.

Disable – Disable the function of VLAN with tag.

Tag value – Type the value as the VLAN ID number. The

range is from 0 to 4095.

Priority – Type the packet priority number for such VLAN.

The range is from 0 to 7.

After finished the above settings, click OK to save the settings.

Vigor2133 Series User’s Guide

IIII--11--11--22 WWAANN33 ((UUSSBB))

To use 3G/4G network connection through 3G/4G USB Modem, please configure WAN3 interface.

Available settings are explained as follows:

Item Description Enable Choose Yes to invoke the settings for this WAN interface.

Display Name Type the description for such WAN interface.

Choose No to disable the settings for this WAN interface.

After finished the above settings, click OK to save the settings.

Vigor2133 Series User’s Guide

IIII--11--22 IInntteerrnneett AAcccceessss

This page allows you to set WAN configuration with different modes. Use the Connection Type drop down list to choose one of the WAN modes. The corresponding page will be displayed.

Available settings are explained as follows:

Item Description Index Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3 /WAN4 that

Physical Mode It shows the physical connection for WAN (Ethernet or fiber)

entered in general setup.

according to the real network connection.

Access Mode Use the drop down list to choose a proper access mode. The

details page of that mode will be popped up. If not, click

Details Page for accessing the page to configure the settings.

Details Page This button will open different web page (based on IPv4)

according to the access mode that you choose in WAN interface.

IPv6 This button will open different web page (based on Physical

Mode) to setup IPv6 Internet Access Mode for WAN interface. If IPv6 service is active on this WAN interface, the color of

“IPv6” will become green.

DHCP Client Option This button allows you to configure DHCP client options.

DHCP packets can be processed by adding option number and data information when such function is enabled and configured.

Enable – Check the box to enable the function of DHCP

Vigor2133 Series User’s Guide

Option. Each DHCP option is composed by an option number with data. For example,

Option number:100 Data: abcd

When such function is enabled, the specified values for DHCP option will be seen in DHCP reply packets.

Interface – Specify the WAN interface(s) that will be overwritten by such function. WAN5 ~ WAN6 can be located under WAN>>Multi-PVC/VLAN.

Option Number – Type a number for such function.

Note: If you choose to configure option 61 here, the

detailed settings in WAN>>Interface Access will be overwritten.

DataType – Choose the type (ASCII or Hex) for the data to be stored.

Data – Type the content of the data to be processed by the function of DHCP option.

IIII--11--22--11 DDeettaaiillss PPaaggee ffoorr PPPPPPooEE

To use PPPoE as the accessing protocol of the internet, please click the PPPoE tab. The following web page will be shown.

Available settings are explained as follows:

Vigor2133 Series User’s Guide

Item Description Enable/Disable Click Enable for activating this function. If you click Disable,

this function will be closed and all the settings that you adjusted in this page will be invalid.

ISP Access Setup Enter your allocated username, password and authentication

parameters according to the information provided by your ISP.

Service Name (Optional) - Enter the description of the specific network service.

Username – Type in the username provided by ISP in this field.

The maximum length of the user name you can set is 63 characters.

Password – Type in the pa ssword provided by ISP in this field. The maximum length of the password you can set is 62

characters. Index (1-15) in Schedule Setup - You can type in four sets of

time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page.

PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you

also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server. Thus, the PC can access Internet through such direction.

For Wired LAN – If you check this box, PCs on the same network can use another set of PPPoE session (different with the Host PC) to access into Internet.

For Wireless LAN – It is available for n model. If you check this box, PCs on the same wireless network can use another set of PPPoE session (different with the Host PC) to access into Internet.

Note: To have PPPoA Pass-through, please choose PPPoA protocol and check the box(es) here. The router will behave like a modem which only serves the PPPoE client on the LAN. That’s, the router will offer PPPoA dial-up connection.

WAN Connection Detection

Such function allows you to verify whether network connection is alive or not through PPP Detect or Ping Detect.

Mode – Choose PPP Detect or Ping Detect for the system to execute for WAN detection. If you choose Ping Detect as the detection mode, you have to type required settings for the following items.

 Primary/Secondary Ping IP – If you choose Ping Detect as

detection mode, you have to type Primary or Secondary IP address in this field for pinging.

 Ping Gateway IP – If you choose Ping Detect as detection

mode, you also can enable this setting to use current WAN gateway IP address for pinging.

With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.

 TTL (Time to Live) – Set TTL value of PING operation.  Ping Interval – Type the interval for the system to

execute the PING operation.

Vigor2133 Series User’s Guide

 Ping Retry – Type the number of times that the system is

allowed to execute the PING operation before WAN disconnection is judged.

MTU It means Max Transmit Unit for packet.

Path MTU Discovery – It is used to detect the maximum MTU

size of a packet not to be segmented in specific transmit path.

Click Detect to open the following dialog.

 Path MTU to – Type the IP address as the specific

transmit path.

 MTU size start from - Determine the starting point

value of the packet.

 MTU reduce size by – It determines the decreasing size

of MTU value. For example, the number specified in this field is “8”. The maximum MTU size is “1500”. After clicking the “detect” button, the system will calculate and get the suitable MTU value such as 1500, 1492, 1484 and etc., automatically.

 Detect – Click it to detect a suitable MTU value  Accept – After clicking it, the detected value will be

displayed in the field of MTU.

TTL Change the TTL value – Enable or disable the TTL (Time to

Live) for a packet transmitted through Vigor router. Enable - TTL value will be reduced (-1) when it passess

through Vigor router. It will cause the client, accessing Internet through Vigor router, be blocked by certain ISP when TTL value becomes “0”.

Disable – TTL value will not be reduced. Then, when a packet passes through Vigor router, it will not be cancelled. That is, the client who sends out the packet will not be blocked by ISP.

PPP/MP Setup PPP Authentication – Select PAP only or PAP or CHAP for

PPP. Idle Timeout – Set the timeout for breaking down the

Internet after passing through the time without any action.

IP Address Assignment Method (IPCP)

Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function.

WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Type the additional WAN

Vigor2133 Series User’s Guide

IP address and check the Enable box. Then click OK to exit the dialog.

Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address.

Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router.

Specify a MAC Address – Type the MAC address for the router manually.

After finishing all the settings here, please click OK to activate them.

IIII--11--22--22 DDeettaaiillss PPaaggee ffoorr SSttaattiicc oorr DDyynnaammiicc IIPP

For static IP mode, you usually receive a fixed public IP address or a public subnet, namely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service pr ovider will offer a public subnet. If you have a public subnet, you could assign an IP address or many IP address to the WAN interface.

To use Static or Dynamic IP as the accessing protocol of the internet, please click the Static or Dynamic IP tab. The following web page will be shown.

Available settings are explained as follows:

Item Description Enable / Disable Click Enable for activating this function. If you click Disable,

this function will be closed and all the settings that you adjusted in this page will be invalid.

Vigor2133 Series User’s Guide

Keep WAN Connection Normally, this function is designed for Dynamic IP

environments because some ISPs will drop connections if there is no traffic within certain periods of time. Check

Enable PING to keep alive box to activate this function. PING to the IP - If you enable the PING function, please

specify the IP address for the system to PING it for keeping alive.

PING Interval - Enter the interval for the system to execute the PING operation.

WAN Connection Detection

Such function allows you to verify whether network connection is alive or not through ARP Detect or Ping Detect.

Mode – Choose ARP Detect, Ping Detect or Always On for the system to execute for WAN detection. If you choose Ping Detect as the detection mode, you have to type required settings for the following items.

 Primary/Secondary Ping IP – If you choose Ping Detect as

detection mode, you have to type Primary or Secondary IP address in this field for pinging.

 Ping Gateway IP – If you choose Ping Detect as detection

mode, you also can enable this setting to use current WAN gateway IP address for pinging.

With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.

 TTL (Time to Live) – Set TTL value of PING operation.  Ping Interval – Type the interval for the system to

execute the PING operation.

 Ping Retry – Type the number of times that the system is

allowed to execute the PING operation before WAN disconnection is judged.

MTU It means Max Transmit Unit for packet.

Path MTU Discovery – It is used to detect the maximum MTU

size of a packet not to be segmented in specific transmit path.

Click Detect to open the following dialog.

 Path MTU to – Choose the destination as the specific

transmit path and type the IP address.

 MTU size start from - Determine the starting point

value of the packet.

 MTU reduce size by – It determines the decreasing size

 Detect – Click it to detect a suitable MTU value  Accept – After clicking it, the detected value will be

Vigor2133 Series User’s Guide

displayed in the field of MTU.

RIP Protocol

TTL Change the TTL value – Enable or disable the TTL (Time to

WAN IP Network Settings This group allows you to obtain an IP address automatically

Routing Information Protocol is abbreviated as RIP（RFC1058） specifying how routers exchange routing tables information. Click Enable RIP for activating this function.

Live) for a packet transmitted through Vigor router. Enable - TTL value will be reduced (-1) when it passess

through Vigor router. It will cause the client, accessing Internet through Vigor router, be blocked by certain ISP when TTL value becomes “0”.

Disable – TTL value will not be reduced. Then, when a packet passes through Vigor router, it will not be cancelled. That is, the client who sends out the packet will not be blocked by ISP.

and allows you type in IP address manually. WAN IP Alias - If you have multiple public IP addresses and

would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using.

Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode.

 Router Name: Type in the router name provided

by ISP.

 Domain Name: Type in the domain name that you

have assigned.

DHCP Client Identifier

 Enable: Check the box to specify username and

password as the DHCP client identifier for some ISP.

 Username: Type a name as username. The

maximum length of the user name you can set is 63 characters.

 Password: Type a password. The maximum length

of the password you can set is 62 characters.

Specify an IP address – Click this radio button to specify some data if you want to use Static IP mode.

 IP Address: Type the IP address.  Subnet Mask: Type the subnet mask.  Gateway IP Address: Type the gateway IP

address.

Default MAC Address: Click this radio button to use default MAC address for the router.

Specify a MAC Address: Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field.

DNS Server IP Address Type in the primary IP address for the router if you want to

use Static IP mode. If necessary, type in secondary IP address for necessity in the future.

After finishing all the settings here, please click OK to activate them.

Vigor2133 Series User’s Guide

IIII--11--22--33 DDeettaaiillss PPaaggee ffoorr PPPPTTPP//LL22TTPP

To use PPTP/L2TP as the accessing protocol of the internet, please click the PPTP/L2TP tab. The following web page will be shown.

Available settings are explained as follows:

Item Description PPTP/L2TP Enable PPTP- Click this radio button to enable a PPTP client

to establish a tunnel to a DSL modem on the WAN interface. Enable L2TP - Click this radio button to enable a L2TP client

to establish a tunnel to a DSL modem on the WAN interface. Disable – Click this radio button to close the connection

through PPTP or L2TP. Server Address - Specify the IP address of the PPTP/L2TP

server if you enable PPTP/L2TP client mode. Specify Gateway IP Address – Specify the gateway IP address

for DHCP server.

ISP Access Setup Username -Type in the username provided by ISP in this

field. The maximum length of the user name you can set is 63 characters.

Password -Type in the password provided by ISP in this field. The maximum length of the password you can set is 62 characters.

Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page.

MTU It means Max Transmit Unit for packet.

Path MTU Discovery – It is used to detect the maximum MTU

size of a packet not to be segmented in specific transmit path.

Click Detect to open the following dialog.

Vigor2133 Series User’s Guide

 Path MTU to – Choose the destination as the specific

transmit path and type the IP address.

 MTU size start from - Determine the starting point

value of the packet.

 MTU reduce size by – It determines the decreasing size

 Detect – Click it to detect a suitable MTU value  Accept – After clicking it, the detected value will be

displayed in the field of MTU.

PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for

PPP. Idle Timeout - Set the timeout for breaking down the

Internet after passing through the time without any action.

IP Address Assignment Method(IPCP)

WAN IP Network Settings Obtain an IP address automatically – Click this button to

WAN IP Alias - If you have multiple public IP addresses and

would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using.

Fixed IP - Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function. Click Yes to use this function and type in a fixed IP address in the box.

Fixed IP Address -Type a fixed IP address.

obtain the IP address automatically. Specify an IP address – Click this radio button to specify

some data.

 IP Address – Type the IP address.  Subnet Mask – Type the subnet mask.

After finishing all the settings here, please click OK to activate them.

Vigor2133 Series User’s Guide

IIII--11--22--44 DDeettaaiillss PPaaggee ffoorr IIPPvv66

When Offline is selected, the IPv6 connection will be disabled.

IIII--11--22--55 DDeettaaiillss PPaaggee ffoorr IIPPvv66

During the procedure of IPv4 PPPoE connection, we can get the IPv6 Link Local Address between the gateway and Vigor router through IPv6CP. Later, use DHCPv6 or accept RA to acquire the IPv6 prefix address (such as: 2001:B010:7300:200::/64) offered by the ISP. In addition, PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix.

–

OOfffflliinnee

–

PPPPPP

No need to type any other information for PPP mode.

Available settings are explained as follows:

Item Description WAN Connection

Detection

Such function allows you to verify whether network connection is alive or not through Ping Detect.

Mode – Choose Always On or Ping Detect for the system to execute for WAN detection. Always On means no detection will be executed. The network connection will be on always.

 Ping IP/Hostname – If you choose Ping Detect as

detection mode, you have to type IP address in this field for pinging.

 TTL (Time to Live) –If you choose Ping Detect as

Vigor2133 Series User’s Guide

detection mode, you have to type TTL value.

RIPng Protocol RIPng (RIP next generation) offers the same functions and

benefits as IPv4 RIP v2.

Below shows an example for successful IPv6 connection based on PPP mode.

Info

IIII--11--22--66 DDeettaaiillss PPaaggee ffoorr IIPPvv66

Tunnel setup protocol client (TSPC) is an application which could help you to connect to IPv6 network easily.

Please make sure your IPv4 WAN connection is OK and apply one free account from hexago (http://gogonet.gogo6.com/page/freenet6-account ) before you try to use TSPC for network connection. TSPC would connect to tunnel broker and requests a tunnel according to the specifications inside the configuration file. It gets a public IPv6 IP address and an IPv6 prefix from the tunnel broker and then monitors the state of the tunnel in background.

After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet.

At present, the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiwan (hinet), the Netherlands, Australia and UK.

–

TTSSPPCC

Vigor2133 Series User’s Guide

Available settings are explained as follows:

Item Description Username Type the name obtained from the broker. It is suggested for

you to apply another username and password for http://gogonet.gogo6.com/page/freenet6-account.

The maximum length of the name you can set is 63 characters.

Password Type the password assigned with the user name.

The maximum length of the name you can set is 19 characters.

Tunnel Broker Type the address for the tunnel broker IP, FQDN or an

optional port number.

WAN Connection Detection

Such function allows you to verify whether network connection is alive or not through Ping Detect.

Mode – Choose Always On or Ping Detect for the system to execute for WAN detection. Always On means no detection will be executed. The network connection will be on always.

 Ping IP/Hostname – If you choose Ping Detect as

detection mode, you have to type IP address in this field for pinging.

 TTL (Time to Live) –If you choose Ping Detect as

detection mode, you have to type TTL value.

After finished the above settings, click OK to save the settings.

Vigor2133 Series User’s Guide

IIII--11--22--77 DDeettaaiillss PPaaggee ffoorr IIPPvv66

–

AAIICCCCUU

Available settings are explained as follows:

Item Description Always On Check this box to keep the network connection always. Username Type the name obtained from the broker. Please apply new

account at http://www.sixxs.net/. It is suggested for you to apply another username and password.

The maximum length of the name you can set is 19 characters.

Password Type the password assigned with the user name.

The maximum length of the password you can set is 19 characters.

Tunnel Broker It means a server of AICCU. The server can provide IPv6

tunnels to sites or end users over IPv4. Type the address for the tunnel broker IP, FQDN or an

optional port number.

Tunnel ID One user account may have several tunnels. And, each

tunnel shall have one specified tunnel ID (e.g., T115394). Type the ID offered by Tunnel Broker.

Subnet Prefix Type the subnet prefix address obtained from service

provider. The maximum length of the prefix you can set is 128

characters.

WAN Connection Detection

Such function allows you to verify whether network connection is alive or not through Ping Detect.

Mode – Choose Always On or Ping Detect for the system to execute for WAN detection.

 Ping IP/Hostname – If you choose Ping Detect as

Vigor2133 Series User’s Guide

detection mode, you have to type IP address in this field for pinging.

 TTL (Time to Live) –If you choose Ping Detect as

detection mode, you have to type TTL value.

After finished the above settings, click OK to save the settings.

IIII--11--22--88 DDeettaaiillss PPaaggee ffoorr IIPPvv66

DHCPv6 client mode would use DHCPv6 protocol to obtain IPv6 address from server.

–

DDHHCCPPvv66 CClliieenntt

Available settings are explained as follows:

Item Description DHCPv6 Client

Configuration

IAID - Type a number as IAID. DUID – Display the DHCP unique ID used by such WAN

interface. Authentication Protocol – Such protocol will be used for

the client to be authenticated by DHCPv6 server before accessing into Internet. There are three types can be specified, Reconfigure Ke y, Delayed and None. In general, the default setting is None.

 Reconfigure Key – During the connection process,

DHCPv6 server will authenticate the client automatically.

 Delayed - During the connection process, DHCPv6 server

will authenticate and identify the client based on the key ID, realm and secret information specified in these fields.

Key ID – Type a value (range from 1 to 65535) which will be used to generate HMAC-MD5 value.

Realm – The name (1 to 31 characters) typed here will identify the key which generates HMAC-MD5 value.

Vigor2133 Series User’s Guide

Secret – Type a text (1 to 31 characters) as s a unique identifier for each client on each DHCP server.

WAN Connection Detection

Such function allows you to verify whether network connection is alive or not through NS Detect or Ping Detect.

Mode – Choose Always On, Ping Detect or NS Detect for the system to execute for WAN detection. With NS Detect mode, the system will check if network connection is established or not, like IPv4 ARP Detect. Always On means no detection will be executed. The network connection will be on always.

 Ping IP/Hostname – If you choose Ping Detect as

detection mode, you have to type IP address in this field for pinging.

 TTL (Time to Live) –If you choose Ping Detect as

detection mode, you have to type TTL value.

Bridge Mode Enable Bridge Mode - If the function is enabled, the router

will work as a bridge modem. Enable Firewall – It is available when Bridge Mode is

enabled. When both Bridge Mode and Firewall check boxes are enabled, the settings configured (user profiles) under User Management will be ignored. And all of the filter rules defined and enabled in Firewall menu will be activated.

Bridge Subnet – Make a bridge between the selected LAN subnet and such WAN interface.

After finished the above settings, click OK to save the settings.

Vigor2133 Series User’s Guide

IIII--11--22--99 DDeettaaiillss PPaaggee ffoorr IIPPvv66

This type allows you to setup static IPv6 address for WAN interface.

–

SSttaattiicc IIPPvv66

Available settings are explained as follows:

Item Description Static IPv6 Address

configuration

Current IPv6 Address Table

Static IPv6 Gateway IPv6 Gateway Address - Type your IPv6 gateway address

IPv6 Address – Type the IPv6 Static IP Address. Prefix Length – Type the fixed value for prefix length. Add – Click it to add a new entry. Update – Click it to modify an existed entry. Delete – Click it to remove an existed entry.

Display current interface IPv6 address.

Vigor2133 Series User’s Guide

Configuration here. WAN Connection

Detection

Such function allows you to verify whether network connection is alive or not through Ping Detect.

Mode – Choose Always On or Ping Detect for the system to execute for WAN detection. Always On means no detection will be executed. The network connection will be on always.

 Ping IP/Hostname – If you choose Ping Detect as

detection mode, you have to type IP address in this field for pinging.

 TTL (Time to Live) –If you choose Ping Detect as

detection mode, you have to type TTL value.

Bridge Mode Enable Bridge Mode - If the function is enabled, the router

will work as a bridge modem. Enable Firewall – It is available when Bridge Mode is

Bridge Subnet – Make a bridge between the selected LAN subnet and such WAN interface.

After finished the above settings, click OK to save the settings.

IIII--11--22--1100 DDeettaaiillss PPaaggee ffoorr IIPPvv66

–

66iinn44 SSttaattiicc TTuunnnneell

This type allows you to setup 6in4 Static Tunnel for WAN interface. Such mode allows the router to access IPv6 network through IPv4 network. However, 6in4 offers a prefix outside of 2002::0/16. So, you can u se a f ixed endpoint rather

than anycast endpoint. The mode has more reliability.

Available settings are explained as follows:

Item Description

Vigor2133 Series User’s Guide

Remote Endpoint IPv4 Address

6in4 IPv6 Address Type the static IPv6 address for IPv4 tunnel with the value

LAN Routed Prefix Type the static IPv6 address for LAN routing with the value

Tunnel TTL Type the number for the data lifetime in tunnel. WAN Connection

Detection

Type the static IPv4 address for the remote server.

for prefix length.

Such function allows you to verify whether network connection is alive or not through Ping Detect.

Mode – Choose Always On or Ping Detect for the system to execute for WAN detection. Always On means no detection will be executed. The network connection will be on always.

 Ping IP/Hostname – If you choose Ping Detect as

detection mode, you have to type IP address in this field for pinging.

 TTL (Time to Live) –If you choose Ping Detect as

detection mode, you have to type TTL value.

After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode.

Vigor2133 Series User’s Guide

–

IIII--11--22--1111 DDeettaaiillss PPaaggee ffoorr IIPPvv66

This type allows you to setup 6rd for WAN interface.

–

66rrdd

Available settings are explained as follows:

Item Description 6rd Mode Auto 6rd – Retrieve 6rd prefix automatically from 6rd service

provider. The IPv4 WAN must be set as "DHCP". Static 6rd - Set 6rd options manually.

IPv4 Border Relay Type the IPv4 addresses of the 6rd Border Relay for a given

6rd domain.

IPv4 Mask Length Type a number of high-order bits that are identical across all

CE IPv4 addresses within a given 6rd domain. It may be any value between 0 and 32.

6rd Prefix Type the 6rd IPv6 address. 6rd Prefix Length Type the IPv6 prefix length for the 6rd IPv6 prefix in number

of bits.

WAN Connection Detection

Such function allows you to verify whether network connection is alive or not through Ping Detect.

Mode – Choose Always On or Ping Detect for the system to execute for WAN detection. Always On means no detection will be executed. The network connection will be on always.

 Ping IP/Hostname – If you choose Ping Detect as

detection mode, you have to type IP address in this field for pinging.

 TTL (Time to Live) –If you choose Ping Detect as

detection mode, you have to type TTL value.

Vigor2133 Series User’s Guide

After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode.

Vigor2133 Series User’s Guide

IIII--11--33 MMuullttii--VVLLAANN

Multi-VLAN allows users to create profiles for specific WAN interface and bridge connections for user applications that require very high network throughput. Simply go to WAN and select Multi-VLAN.

GGeenneerraall

This page shows the basic configurations used by every channel. In which, Channels 4 through 10 can be bridged to one or more of the 3 LAN ports P2 through P4. In addition, Channels 4 through 6 can be configured as virtual WANs (WAN4 through WAN6).

Available settings are explained as follows:

Item Description Channel Display the number of each channel.

Channels 1 is used by the Internet Access web user interface and can not be configured here.

Channels 4 ~ 10 are configurable.

Enable Display whether the settings in this channel are enabled

(Yes) or not (No).

WAN Type Displays the physical medium that the channel will use. VLAN Tag Displays the VLAN tag value that will be used for the packets

traveling on this channel.

Port-based Bridge The network traffic flowing on each channel will be

identified by the system via their VLAN Tags. Channels using the same WAN type may not configure the same VLAN tag value.

Enable - Check this box to enable the port-based bridge function on this channel.

P1 ~ P4 – Check the box(es) to build bridge connection on LAN.

To configure a PVC channel, click its channel number.

Vigor2133 Series User’s Guide

WAN links for Channel 4, 5 and 6 are provided for router-borne application such as TR-069. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 4, 5 or 6 to configure your router.

Available settings are explained as follows:

Item Description Multi-VLAN Channel 4/5/6 Enable – Select to enable this channel.

Disable – Select to disable this channel.

General Settings VLAN Tag – Type the value as the VLAN ID number. Valid

settings are in the range from 1 to 4095. The network traffic flowing on each channel will be identified by the system via their VLAN Tags. Channels using the same WAN type may not configure the same VLAN tag value.

Priority – Choose the number to determine the packet priority for such VLAN. The range is from 0 to 7.

Open Port-based Bridge The settings here will create a bridge between the LAN ports

Vigor2133 Series User’s Guide

Connection for this Channel

Open WAN Interface for this Channel

selected and the WAN. The WAN interface of the bridge connection will be built upon the WAN type selected using the VLAN tag configured.

Physical Members – Group the physical ports by checking the corresponding check box(es) for applying the port-based bridge connection.

Note: LAN port P1 is reserved for NAT use and cannot be selected for bridging.

Check the box to enable relating function.

WAN Application

 Management can be specified for general management

(Web configuration/telnet/TR069). If you choose Management, the configuration for this VLAN will be effective for Web configuration/telnet/TR069.

 IPTV - The IPTV configuration will allow the WAN

interface to send IGMP packets to IPTV servers.

WAN Setup – Choose PPPoE/PPPoA or Static or Dynamic IP to determine what WAN settings must be configured.

ISP Access Setup, IP

For other settings, refer to Details Page for PPPoE in WAN1.

Address From ISP, WAN IP Network Settings, DNS Server IP Address

After finished the above settings, click OK to save the settings and return to previous page. Click any index (7, 8, 9 and 10) to get the following web page:

Available settings are explained as follows:

Item Description Multi-VLAN Channel Enable – Click it to enable the configuration of this channel.

Vigor2133 Series User’s Guide

7/8/9/10 Disable –Click it to disable the configuration of this channel. General Settings VLAN Tag – Type the value as the VLAN ID number. Valid

Priority – Choose the number to determine the packet priority for such VLAN. The range is from 0 to 7.

Bridge mode Enable – Click it to enable Bridge mode for such channel.

Physical Members – Group the physical ports by checking the

corresponding check box(es) for applying the bridge connection.

After finished the above settings, click OK to save the settings.

Vigor2133 Series User’s Guide

IIII--11--44 WWAANN BBuuddggeett

This function is used to determine the data traffic volume for each WAN interface respectively to prevent from overcharges for data transmission by the ISP. Please note that the Quota Limit and Billing cycle day of month settings will need to be configured correctly first in order for some period calculations to be performed correctly.

IIII--11--44--11 GGeenneerraall SSeettuupp

Item Description Index The WAN port.

Click to configure WAN Budget for a particular WAN.

Enable v - WAN Budget is enabled on this WAN.

x - WAN Budget is disabled on this WAN.

Quota The current cycle’s Internet usage is expressed as x/y where

x is the cumulative usage and y is the upper limit. For example, 100MB/200MB means the usage thus far in this cycle is 100MB, and the upper limit is 200MB.

When quota exceeded Actions to be taken once the quota is reached.

Shutdown – WAN will be disabled. Mail Alert – Email will be sent to the administrator.

Time cycle Reset frequency of the usage data.

Monthly – The Monthly option in the Criterion and Action

tab was used to set up the usage quota.

User Defined: The User Defined option in the Criterion and Action tab was used to set up the usage qota.

Duration Start and end timestamps of the current cycle.

Click WAN1/ WAN3 link to open the following web page.

Vigor2133 Series User’s Guide

Available settings are explained as follows:

Item Description Enable Check the box to enable such function. Quota Limit Type the data traffic quota allowed for such WAN interface.

There are two unit (MB and GB) offered for you to specify.

When quota exceeded Check the box(es) as the condition(s) for the system to

perform when the traffic has exceeded the budget limit. Shutdown WAN interface – All the outgoing traffic through

such WAN interface will be terminated.

 Using Notification Object – The system will send out a

notification based on the content of the notification object.

 Set Mail Alert – The system will send out a warning

message to the administrator when the quota is running out. However, the connection charges will be calculated continuously.

 Set SMS message - The system will send out SMS

message to the administrator when the quota is running out.

Monthly Some ISP might apply for the network limitation based on the

traffic limit per month. This setting is to offer a mechanism of resetting the traffic record every month.

Data quota resets on day … – You can determine the starting day in one month.

Custom This setting allows the user to define the billing cycle

according to his request. The WAN budget will be reset with an interval of billing cycle.

Monthly is default setting. If long period or a short period is required, use Custom. The period of cycle duration is

Vigor2133 Series User’s Guide

between 1 day and 60 days. You can determine the cycle duration by specifying the days and the hours. In addition, you can specify which day of today is in a cycle.

Use Cycle in hours –

 Cycle duration: Specify the days and hours to reset the

traffic record. For example, 7 means the whole cycle is 7 days; 20 means the whole cycle is 20 days. When the time is up, the router will reset the traffic record automatically.

 Today is day – Specify the day in the cycle as the starting

point which Vigor router will reset the traffic record. For example, “3” means the third day of the cycle duration.

Use Cycle in days -

 Cycle duration: Specify the days to reset the traffic

record. For example, 7 means the whole cycle is 7 days; 20 means the whole cycle is 20 days. When the time is up, the router will reset the traffic record automatically.

 Today is day – Specify the day and time for data quota

rest in the cycle as the starting point which Vigor router will reset the traffic record. For example, “3” means the third day of the cycle duration.

After finished the above settings, click OK to save the settings.

Vigor2133 Series User’s Guide

IIII--11--44--22 SSttaattuuss

The status page displays the status WAN budget, including the duration and the usage.

If the WAN budget is exhausted, a lock will be displayed on the page if Shutdown WAN interface is selected. Which means no data transmission will be carried out. Moreover, the system will send out a warning message to the administrator if Mail Alert is selected. Or, the system will send out SMS message to the administrator if SMS message is selected.

Vigor2133 Series User’s Guide

AApppplliiccaattiioonn NNootteess

AA--11 HHooww ttoo ccoonnffiigguurree IIPPvv66 oonn WWAANN iinntteerrffaaccee??

This document is going to demonstrate how to implement an IPv6 address on Vigor Router's WAN.

1. Before configuring IPv6 on WAN, please make sure the router is connected to the IPv4 Internet.

2. Go to WAN >> Internet Access, click on IPv6 of the WAN interface that you would like to configure an IPv6 address.

3. Select a Connection Type from the drop-down list, enter the required parameters. Then click OK and reboot the router to apply the settings.

Vigor2133 Series User’s Guide

4. After accomplishing the configurations, Network Administrator may check the status from the IPv6 tab on Online Status >> Physical Connection page.

5. Furthermore, Network Administrator may test the connectivity of IPv6 from the router by going to Diagnostics >> Ping Diagnosis and selecting "IPv6".

Below we will provide some examples of configuring IPv6 with different connection types.

Vigor2133 Series User’s Guide

PPPPPP ((PPooiinntt--ttoo--PPooiinntt PPrroottooccooll))

This applies if the IPv4 access mode is PPPoE, and the IPv4 ISP also provides an IPv6 address. To use IPv6 PPP, you just need to choose the Connection Type to "PPP", no other setting is required.

TTSSPPCC ((TTuunnnneell SSeettuupp PPrroottooccooll CClliieenntt))

In this mode, the IPv6 connectivity is provided by a tunnel broker on the IPv4 Internet through a tunnel set up by Tunnel Setup Protocol (TSP). To use TSPC, you'll need to sign up for a tunnel broker service and get a username and password first, then, configure the router as follows:

1. Set Connection Type to TSPC.

2. Enter the Username and Password registered at the TSP server.

3. Enter the IP or Domain Name of the TSPC server for Tunnel Broker.

Vigor2133 Series User’s Guide

SSttaattiicc IIPPvv66

If your ISP provides a static IPv6 address for you, you may configure that IPv6 address for WAN by doing the following steps:

1. Set Connection Type to Static IPv6.

2. Enter the IPv6 address and Prefix Length which provided by the ISP, and click Add.

3. You should see the IPv6 address in Current IPv6 Address Table. Then, specify the IP

address of IPv6 Gateway.

Vigor2133 Series User’s Guide

66iinn44 SSttaattiicc TTuunnnneell

In this mode, the IPv6 connectivity is provided by a tunnel broker on the IPv4 Internet through a tunnel configured manually. To use 6in4 Static Tunnel, you need sign up for a tunnel broker service and get an IPv6 address and routed IPv6 prefixes first. Then, configure the router as follows:

1. Set Connection Type to 6in4 Static Tunnel.

2. Enter the tunnel server's IPv4 address in Remote Endpoint IPv4 Address.

3. Enter the router's IPv6 address in 6in4 IPv6 Address.

4. Enter the routed IPv6 prefix in LAN Routed Prefix.

Vigor2133 Series User’s Guide

IIII--22 LLAANN

Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP.

The most generic function of Vigor router is NAT. It creates a private subnet of your own. As mentioned previously, the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address. What NAT does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa. Besides, Vigor router has a built-in DHCP server that assigns private IP address to each local host. See the following diagram for a briefly understanding.

In some special case, you may have a public IP subnet from your ISP such as 220.135.240.0/24. This means that you can set up a public subnet or call second subnet that each host is equipped with a public IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts.

Vigor2133 Series User’s Guide

WWhhaatt iiss RRoouuttiinngg IInnffoorrmmaattiioonn PPrroottooccooll ((RRIIPP))

Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing. This allows users to change the information of the router such as IP address and the routers will automatically inform for each other.

WWhhaatt iiss SSttaattiicc RRoouuttee

When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other method. You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP.

WWhhaatt aarree VViirrttuuaall LLAANNss aanndd RRaattee CCoonnttrrooll

You can group local hosts by physical ports and create up to 8 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each.

Vigor2133 Series User’s Guide

WWeebb UUsseerr IInntteerrffaacce

A LAN comprises a collection of LAN clients, which ar e networked devices on your premises. A LAN client can be a computer, a printer, a Voice-over-IP (VoIP) phone, a mobile phone, a gaming console, an Internet Protocol Television (IPTV), etc, and can have either a wired (using Ethernet cabling) or wireless (using Wi-Fi) network connection.

LAN clients within the same LAN are normally able to communicate with one another directly, as they are peers to one another, unless measures, such as firewalls or VLANs, have been put in place to restrict such access. Nowadays the most common LAN firewalls are implemented on the LAN client itself. For example, Microsoft Windows since Windows XP an d Apple OS X have built-in firewalls that can be configured to restrict traffic coming in and going out of the computer. VLANs, on the other hand, are usually set up using network switches or routers.

To communicate with the hosts outside of the LAN, LAN clients have to go through a network gateway, which in most cases is a router that sits between the LAN and the ISP network, which is the WAN. The router acts as a director to ensure traffic between the LAN and the WAN reach their intended destinations.

IIII--22--11 GGeenneerraall SSeettuupp

This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup.

There are four subnets provided by the router which allow users to divide groups into different subnets (LAN1 – LAN4). In addition, different subnets can link for each other by configuring Inter-LAN Routing. At present, LAN1 setting is fixed with NAT mode only. LAN2 – LAN4 can be operated under NAT or Route mode. IP Routed Subnet can be operated under Route mode.

Vigor2133 Series User’s Guide

Available settings are explained as follows:

Item Description General Setup Allow to configure settings for each subnet respectively.

Index - Display all of the LAN items. Status- Basically, LAN1 status is enabled in default.

LAN2 –LAN4 and IP Routed Subnet can be observed by checking the box of Status.

DHCP- LAN1 is configured with DHCP in default. If required, please check the DHCP box for each LAN.

IP Address - Display the IP address for each LAN item. Such information is set in default and you can not modify it.

Details Page - Click it to access into the setting page. Each LAN will have different LAN configuration page. Each LAN

must be configured in different subnet. IPv6 – Click it to access into the settings page of IPv6.

DHCP Server Option DHCP packets can be processed by adding option number and

data information when such function is enabled. For detailed information, refer to later section.

Force router to use “DNS server IP address” …..

Force Vigor router to use DNS servers configured in LAN1/LAN2/LAN3/LAN4 instead of DNS servers given by the Internet Access server (PPPoE, PPTP, L2TP or DHCP server).

Inter-LAN Routing Check the box to link two or more different subnets (LAN and

LAN). Inter-LAN Routing allows different LAN subnets to be

interconnected or isolated.

Vigor2133 Series User’s Guide

It is only available when the VLAN functionality is enabled. Refer to section II-2-2 VLAN on how to set up VLANs.

In the Inter-LAN Routing matrix, a selected checkbox means that the 2 intersecting LANs can communicate with each other.

When you finish the configuration, please click OK to save and exit this page.

Info

To configure a subnet, select its Detials Page button to bring up the LAN Details Page.

Vigor2133 Series User’s Guide

IIII--22--11--11 DDeettaaiillss PPaaggee ffoorr LLAANN11

There are two configuration pages for LAN1, Ethernet TCP/IP and DHCP Setup (based on IPv4) and IPv6 Setup. Click the tab for each type and refer to the following explanations for detailed information.

–

EEtthheerrnneett TTCCPP//IIPP aanndd DDHHCCPP SSeettuupp

Available settings are explained as follows:

Item Description Network Configuration For NAT Usage,

IP Address - This is the IP address of the router. (Default:

192.168.1.1). Subnet Mask - The subnet mask, together with the IP Address

field, indicates the maximum number of clients allowed on the subnet. (Default: 255.255.255.0/ 24).

RIP Protocol Control, Enable – When Enabled, the router will attempt to exchange

routing information with neighbouring routers using the Routing Information Protocol.

DHCP Server Configuration

DHCP stands for Dynamic Host Configuration Protocol. The router by factory default acts a DHCP server for your network so it automatically dispatches related IP settings to any local user configured as a DHCP client. It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network.

If you want to use another DHCP server in the network other than the Vigor Router’s, you can let Relay Agent help you to redirect the DHCP request to the specified location.

Disable Server – Let you manually assign IP address to every host in the LAN.

Enable Server - Let the router assign IP address to every host in the LAN.

 Start IP Address - The beginning LAN IP address that is

given out to LAN DHCP clients.

 IP Pool Counts - The maximum number of IP addresses

to be handed out by DHCP. The default value is 200. V alid range is between 1 and 253. The actual number of IP addresses available for assignment is the IP Pool

Vigor2133 Series User’s Guide

Counts, or 253 minus the last octet of the Start IP Address, whichever is smaller.

 Gateway IP Address - The IP address of the gateway,

which is the host on the LAN that relays all traffic coming into and going out of the LAN. The gateway is normally the router, and therefore the Gateway IP Address should be identical to the IP Address in the Network Configuration section above.

 Lease Time - The maximum duration DHCP-issued IP

addresses can be used before they have to be renewed.

 Clear DHCP lease for inactive clients periodically - If

selected, the router sends ARP requests recycles IP addresses previously assigned to inactive DHCP clients to prevent exhaustion of the IP address pool.

Note: When Clear DHCP lease for inactive clients periodically is enabled, router will do the following:

 Check activities of DHCP clients by ARP requests

every minute when the available DHCP IP addresses are less than 30

 Clear DHCP lease when the client is not

responding ARP replies.

Enable Relay Agent – When selected, all DHCP requests are forwarded to a DHCP server outside of the LAN subnet, and whose address is specified in the DHCP Server IP Addr ess field.

 DHCP Server IP Address – It is available when Enable

Relay Agent is checked. Set the IP address of the DHCP

server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server.

DNS Server IP Address DNS stands for Domain Name System. Every Internet host

must have a unique IP address, also they may have a human-friendly, easy to remember name such as www.yahoo.com. The DNS server converts the user-friendly name into its equivalent IP address.

Primary IP Address -You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server.

Secondary IP Address - You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server.

The default DNS Server IP address can be found via Online Status:

If both the Primary IP and Secondary IP Address field s are left empty, the router will assign its own IP address to local users as a DNS proxy server and maintain a DNS cache.

If the IP address of a domain name is already in the DNS cache, the router will resolve the domain name immediately. Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection.

Vigor2133 Series User’s Guide

When you finish the configuration, please click OK to save and exit this page. Private IP addresses can be assigned automatically to LAN clients using Dynamic Host

Configuration Protocol (DHCP), or manually assigned. The DHCP server can either be the router (the most common case), or a separate server, that hands out IP addresses to DHCP clients.

Alternatively, static IP addresses can be manually configured on LAN clients as part of their network settings. No matter how IP addresses are configured, it is important that no two devices get the same IP address. If both DHCP and static assignme nt are used on a network, it is important to exclude the static IP addresses from the DHCP IP pool. For example, if your LAN uses the 192.168.1.x subnet and you have 20 DHCP clients and 20 static IP clients, you could configure 192.168.1.10 as the Start IP Address, 50 as the IP Pool Counts (enough for the current number of DHCP clients, plus room for future expansion), and use addresses greater than 192.168.1.100 for static assignment.

IIII--22--11--22 DDeettaaiillss PPaaggee ffoorr LLAANN22 ~~ LLAANN44

Available settings are explained as follows:

Item Description Network Configuration Enable/Disable - Click Enable to enable such configuration;

click Disable to disable such configuration. For NAT Usage - Click this radio button to invoke NAT

function. For Routing Usage - Click this radio button to invoke this

function. IP Address - This is the IP address of the router. (Default:

192.168.1.1). Subnet Mask - The subnet mask, together with the IP Address

field, indicates the maximum number of clients allowed on the subnet. (Default: 255.255.255.0/ 24).

DHCP Server Configuration

Vigor2133 Series User’s Guide

DHCP stands for Dynamic Host Configuration Protocol. The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client. It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network.

Disable Server – Let you manually assign IP address to every

host in the LAN. Enable Server - Let the router assign IP address to every host

in the LAN.  Start IP Address - The beginning LAN IP address that is

given out to LAN DHCP clients.

 IP Pool Counts - The maximum number of IP addresses

to be handed out by DHCP. The default value is 100. V alid range is between 1 and 253. The actual number of IP addresses available for assignment is the IP Pool Counts, or 253 minus the last octet of the Start IP Address, whichever is smaller.

 Gateway IP Address - The IP address of the gateway,

 Lease Time - The maximum duration DHCP-issued IP

addresses can be used before they have to be renewed.

 Clear DHCP lease for inactive clients periodically - If

selected, the router sends ARP requests recycles IP addresses previously assigned to inactive DHCP clients to prevent exhaustion of the IP address pool.

Note: When Clear DHCP lease for inactive clients periodically is enabled, router will do the following:

 Check activities of DHCP clients by ARP requests

every minute when the available DHCP IP addresses are less than 30

 Clear DHCP lease when the client is not

responding ARP replies.

Enable Relay Agent – When selected, all DHCP requests are forwarded to a DHCP server outside of the LAN subnet, and whose address is specified in the DHCP Server IP Addr ess field.

 DHCP Server IP Address – It is available when Enable

Relay Agent is checked. Set the IP address of the DHCP

server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server.

DNS Server IP Address DNS stands for Domain Name System. Every Internet host

must have a unique IP address, also they may have a human-friendly, easy to remember name such as www.yahoo.com. The DNS server converts the user-friendly name into its equivalent IP address.

Primary IP Address -You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server.

Secondary IP Address - You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server.

The default DNS Server IP address can be found via Online Status:

Vigor2133 Series User’s Guide

If both the Primary IP and Secondary IP Address field s are left empty, the router will assign its own IP address to local users as a DNS proxy server and maintain a DNS cache.

When you finish the configuration, please click OK to save and exit this page.

IIII--22--11--33 DDeettaaiillss PPaaggee ffoorr IIPP RRoouutteedd SSuubbnneett

Available settings are explained as follows:

Item Description Network Configuration Enable/Disable - Click Enable to enable such configuration;

click Disable to disable such configuration. For Routing Usage, IP Address - This is the IP address of the router. (Default:

192.168.1.1). Subnet Mask - The subnet mask, together with the IP Address

field, indicates the maximum number of clients allowed on the subnet. (Default: 255.255.255.0/ 24).

RIP Protocol Control, Enable – When Enabled, the router will attempt to exchange

routing information with neighbouring routers using the

Vigor2133 Series User’s Guide

Routing Information Protocol.

DHCP Server Configuration

If you want to use another DHCP server in the network other than the Vigor Router’s, you can let Relay Agent help you to redirect the DHCP request to the specified location.

Start IP Address - The beginning LAN IP address that is given out to LAN DHCP clients.

IP Pool Counts - The maximum number of IP addresses to be handed out by DHCP. The default value is 100. Valid range is between 1 and 253. The actual number of IP addresses available for assignment is the IP Pool Counts, or 253 minus the last octet of the Start IP Address, whichever is smaller.

Gateway IP Address - The IP address of the gateway, which is the host on the LAN that relays all traffic coming into and going out of the LAN. The gateway is normally the router, and therefore the Gateway IP Address should be identical to the IP Address in the Network Configuration section above.

Lease Time - The maximum duration DHCP-issued IP addresses can be used before they have to be renewed.

Use LAN Port – Specify an IP for IP Route Subnet. If it is enabled, DHCP server will assign IP address automatically for the clients coming from P1 and/or P2. Please check the box of P1 and P2.

Use MAC Address - Check such box to specify MAC address.  MAC Address: Enter the MAC Address of the host one by

one and click Add to create a list of hosts which can be assigned, deleted or edited from above pool. Set a list of MAC Address for 2 assign the correct IP address of the correct subnet to the correct host. So those hosts in 2 an IP address belonging to 1

DHCP server will help router to

subnet.

subnet won’t get

Add – Type the MAC address in the boxes and click this button to add.

Delete – Click it to delete the selected MAC address. Edit – Click it to edit the selected MAC address. Cancel – Click it to cancel the job of adding, deleting and

editing.

When you finish the configuration, please click OK to save and exit this page.

IIII--22--11--44 DDeettaaiillss PPaaggee ffoorr LLAANN IIPPvv66 SSeettuupp

There are two configuration pages for each LAN. Click the tab for each type and refer to the following explanations for detailed information. Below shows the settings page for IPv6.

Vigor2133 Series User’s Guide

It provides 2 daemons for LAN side IPv6 address configuration. One is SLAAC(stateless) and the other is DHCPv6 (Stateful) server.

Available settings are explained as follows:

Item Description Enable Check the box to enable the configuration of LAN 1 IPv6

Setup.

WAN Primary Interface Use the drop down list to specify a WAN interface for IPv6. Static IPv6 Address

configuration

IPv6 Address –Type static IPv6 address for LAN. Prefix Length – Type the fixed value for prefix length. Add – Click it to add a new entry.

Vigor2133 Series User’s Guide

Delete – Click it to remove an existed entry.

Unique Local Address (ULA) configuration

Unique Local Addresses (ULAs) are private IPv6 addresses assigned to LAN clients.

Off - ULA is disabled. Manually ULA Prefix - LAN clients will be assigned ULAs

generated based on the prefix manually entered. Auto ULA Prefix - LAN clients will be assigned ULAs using an

automatically-determined prefix.

Current IPv6 Address

Display current used IPv6 addresses.

Table DNS Server IPv6 Address Deploy when WAN is up – The RA (router advertisement)

packets will be sent to LAN PC with DNS server information only when network connection by any one of WAN interfaces is up.

Enable – The RA (router advertisement) packets will be sent to LAN PC with DNS server information no matter WAN connection is up or not.

 Primary DNS Sever – Type the IPv6 address for Primary

DNS server.

 Secondary DNS Server –Type another IPv6 address for

DNS server if required.

Disable – DNS server will not be used.

Management Configures the Managed Address Configuration flag (M-bit) in

Route Advertisements.  Off - No configuration information is sent using Route

Advertisements.

 SLAAC(stateless) - M-bit is unset.  DHCPv6(stateful) - M-bit is set, which indicates to LAN

clients that they should acquire all IPv6 configuration information from a DHCPv6 server. The DHCPv6 server can either be the one built into the Vigor2860, or a separate DHCPv6 server.

Other Option(O-bit) When selected, the Other Configuration flag is set, which

indicates to LAN clients that IPv6 configuration information besides LAN IPv6 addresses is available from a DHCP v6 server.

Setting the M-bit (see Management above) has the same effect as implicitly setting the O-bit, as DHCPv6 supplies all IPv6 configuration information, including what is indicated as available when the O-bit is set.

DHCPv6 Server Enable Server –Click it to enable DHCPv6 server. DHCPv6

Server could assign IPv6 address to PC according to the Start/End IPv6 address configuration.

Vigor2133 Series User’s Guide

DrayTek Vigor2133 operation manual

Specifications and Main Features

Frequently Asked Questions

User Manual