DrayTek Vigor2862-B Service Manual

Vigor2862 Series

VDSL2 Security Firewall

User’s Guide

Version: 1.0

Firmware Version: V3.8.5

(For future update, please visit DrayTek web site)

Date: June 5, 2017

Vigor2862 Series User’s Guide

Copyrights

© All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.

Trademarks

The following trademarks are used in this document:

 Microsoft is a registered trademark of Microsoft Corp.  Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are trademarks of Microsoft Corp.  Apple and Mac OS are registered trademarks of Apple Inc.  Other products may be trademarks or registered trademarks of their respective manufacturers.

Safety Instructions



Read the installation guide thoroughly before you set up the router.

 The router is a complicated electronic unit that may be repaired only be authorized and qualified personnel.

Do not try to open or repair the router yourself.

 Do not place the router in a damp or humid place, e.g. a bathroom.  The router should be used in a sheltered area, within a temperature range of +5 to +40 Celsius.  Do not expose the router to direct sunlight or other heat sources. The housing and electronic components

may be damaged by direct sunlight or heat sources.

 Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards.  Keep the package out of reach of children.  When you want to dispose of the router, please follow local regulations on conservation of the environment.

Warranty

 We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship

or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.

Be a Registered Owner

 Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com.

Firmware & Tools Updates

 Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult

the DrayTek web site for more information on newest firmware, tools and documents.

http://www.DrayTek.com

Vigor2862 Series User’s Guide

iii

European Community Declarations

Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu County,

Taiwan 303

Product: Vigor2862 Series

DrayTek Corp. declares that Vigor2862 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU

The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.

The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/E C by complying with the requirements set forth in EN60950-1.

This product is designed for DSL and 2.4GHz /5GHz WLAN network throughout the EC region.

Regulatory Information

Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device,

pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

 Reorient or relocate the receiving antenna.  Increase the separation between the equipment and receiver.  Connect the equipment into an outlet on a circuit different from that to which the receiver is

connected.  Consult the dealer or an experienced radio/TV technician for help. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two

conditions: (1) This device may not cause harmful interference, and (2) This device may accept any interference received, including int erference that may cause undesired

operation. Caution: Any changes or modifications not expressly approved by the party responsible for compliance

could void the user's authority to operate the equipment. The antenna/transmitter should be kept at least 20 cm away from human body. DrayTek Vigor2862 series VDSL2/ADSL2+ routers are compliant with 47 C.F.R. Part 68.

More update, please visit www.draytek.com.

Vigor2862 Series User’s Guide

TTaabbllee ooff CCoonntteennttss

Part I Installation.................................................................................................................i

I-1 Introduction ................................................................................................................................... 1

I-1-1 Indicators and Connectors .................................................................................................. 2

I-1-1-1 Vigor2862 / Vigor2862B / Vigor2862L.................................................. 2

I-1-1-2 Vigor2862n/Vigor2862ac/Vigor2862Bn/ Vigor2862Ln / Vigor2862Lac ............... 4

I-1-1-3 Vigor2862Vac ............................................................................... 7

I-1-2 Notes for Antenna Installation (for “L” model)..................................................................... 9

I-2 Hardware Installation ...................................................................................................................11

I-2-1 Installing Vigor Router....................................................................................................... 11

I-2-2 Wall-Mounted Installation.................................................................................................. 12

I-2-3 Installing USB Printer to Vigor Router............................................................................... 13

I-3 Accessing Web Page.................................................................................................................. 21

I-4 Changing Password.................................................................................................................... 23

I-5 Dashboard................................................................................................................................... 25

I-5-1 Virtual Panel...................................................................................................................... 26

I-5-2 Name with a Link............................................................................................................... 27

I-5-3 Quick Access for Common Used Menu ............................................................................ 28

I-5-4 GUI Map ............................................................................................................................ 29

I-5-5 Web Console..................................................................................................................... 30

I-5-6 Config Backup................................................................................................................... 31

I-5-7 Logout................................................................................................................................ 31

I-5-8 Online Status..................................................................................................................... 32

I-5-8-1 Physical Connection......................................................................32

I-5-8-2 Virtual WAN ...............................................................................34

I-6 Quick Start Wizard...................................................................................................................... 35

I-6-1 For WAN1 (ADSL/VDSL2) ................................................................................................ 36

I-6-2 For WAN2 (Ethernet)/(Wireless 2.4G)............................................................................... 42

I-6-3 For WAN3/WAN4 (USB).................................................................................................... 57

I-7 Service Activation Wizard........................................................................................................... 59

I-8 Registering Vigor Router............................................................................................................. 63

Part II Connectivity ..........................................................................................................67

II-1 WAN........................................................................................................................................... 68

Web User Interface.................................................................................................................... 70

II-1-1 General Setup .................................................................................................................. 70

II-1-1-1 WAN1(ADSL/VDSL2)......................................................................71

II-1-1-2 WAN2 (Ethernet)/(Wireless 2.4/5G)..................................................74

II-1-1-3 WAN3/WAN4 (USB).......................................................................76

II-1-2 Internet Access................................................................................................................. 78

II-1-2-1 Details Page for PPPoE in WAN1 (Physical Mode: VDSL2) .........................80

II-1-2-2 Details Page for MPoA/Static or Dynamic IP in WAN1 (Physi cal Mode: VDSL2)83

II-1-2-3 Details Page for PPPoE/PPPoA in WAN1 (Physical Mode: ADSL)..................86

Vigor2862 Series User’s Guide

II-1-2-4 Details Page for MPoA/Static or Dynamic IP in WAN1 (Physi cal Mode: ADSL) .89

II-1-2-5 Details Page for PPPoE in WAN2 (Physical Mode: Ethernet)......................93

II-1-2-6 Details Page for Static or Dynamic IP in WAN2 (Physical Mode: Ethernet).....95

II-1-2-7 Details Page for PPTP/L2TP in WAN2 (Physical Mode: Ethernet)................99

II-1-2-8 Details Page for Static or Dynamic IP in WAN2 (Physical Mode: Wireless 2.4G)

..................................................................................................... 101

II-1-2-9 Details Page for 3G/4G USB Modem (PPP mode) in WAN3/WAN4.............. 104

II-1-2-10 Details Page for 3G/4G USB Modem (DHCP mode) in WAN3/WAN4.......... 106

II-1-2-11 Details Page for IPv6 – Offline in WAN1/WAN2/WAN3/WAN4................. 108

II-1-2-12 Details Page for IPv6 – PPP in WAN1/WAN2...................................... 108

II-1-2-13 Details Page for IPv6 – TSPC in WAN1/WAN2/WAN3/WAN4 ................... 109

II-1-2-14 Details Page for IPv6 – AICCU in WAN1/WAN2/WAN3/WAN4.................. 111

II-1-2-15 Details Page for IPv6 – DHCPv6 Client in WAN1/WAN2......................... 113

II-1-2-16 Details Page for IPv6 – Static IPv6 in WAN1/WAN2 ............................. 114

II-1-2-17 Details Page for IPv6 – 6in4 Static Tunnel in WAN1/WAN2.................... 117

II-1-2-18 Details Page for IPv6 – 6rd in WAN1/WAN2 ...................................... 118

II-1-3 Multi-PVC/VLAN............................................................................................................. 120

II-1-4 WAN Budget................................................................................................................... 127

II-1-4-1 General Setup .......................................................................... 127

II-1-4-2 Status .................................................................................... 129

Application Notes.....................................................................................................................130

A-1 How to assign an IPv6 address to LAN clients?......................................... 130

A-2 How to configure IPv6 on WAN interface?.............................................. 133

II-2 LAN.......................................................................................................................................... 138

Web User Interface..................................................................................................................140

II-2-1 General Setup ................................................................................................................ 140

II-2-1-1 Details Page for LAN1 – Ethernet TCP/IP and DHCP Setup...................... 142

II-2-1-2 Details Page for LAN2 ~ LAN8 and DMZ ............................................ 144

II-2-1-3 Details Page for IP Routed Subnet .................................................. 146

II-2-1-4 Details Page for LAN IPv6 Setup..................................................... 147

II-2-2 VLAN.............................................................................................................................. 151

II-2-3 Bind IP to MAC............................................................................................................... 155

II-2-4 LAN Port Mirror............................................................................................................... 158

II-2-5 Wired 802.1x .................................................................................................................. 159

II-3 Hardware Acceleration............................................................................................................. 160

II-3-1 Setup .............................................................................................................................. 160

II-4 NAT .......................................................................................................................................... 163

Web User Interface..................................................................................................................164

II-4-1 Port Redirection.............................................................................................................. 164

II-4-2 DMZ Host ....................................................................................................................... 168

II-4-3 Open Ports ..................................................................................................................... 171

II-4-4 Port Triggering................................................................................................................ 173

II-4-5 ALG................................................................................................................................. 175

II-5 Applications.............................................................................................................................. 176

Web User Interface..................................................................................................................178

II-5-1 Dynamic DNS................................................................................................................. 178

II-5-2 LAN DNS / DNS Forwarding.......................................................................................... 182

II-5-3 DNS Security..................................................................................................................185

Vigor2862 Series User’s Guide

II-5-3-1 General Setup .......................................................................... 185

II-5-3-2 Domain Diagnose....................................................................... 186

II-5-4 Schedule......................................................................................................................... 187

II-5-5 RADIUS/TACACS+........................................................................................................ 189

II-5-5-1 External RADIUS........................................................................ 189

II-5-5-2 Internal RADIUS ........................................................................ 190

II-5-5-3 External TACACS+...................................................................... 193

II-5-6 Active Directory/LDAP.................................................................................................... 194

II-5-6-1 General Setup .......................................................................... 194

II-5-6-2 Profiles .................................................................................. 195

II-5-7 UPnP.............................................................................................................................. 197

II-5-8 IGMP............................................................................................................................... 198

II-5-8-1 General Setting ........................................................................ 198

II-5-8-2 Working Group ......................................................................... 199

II-5-9 Wake on LAN ................................................................................................................. 200

II-5-10 SMS / Mail Alert Service............................................................................................... 201

II-5-10-1 SMS Alert............................................................................... 201

II-5-10-2 Mail Alert.............................................................................. 202

II-5-11 Bonjour......................................................................................................................... 203

II-5-12 High Availability............................................................................................................ 206

II-5-12-1 General Setup......................................................................... 207

II-5-12-2 Config Sync ............................................................................ 209

II-5-13 Local 802.1X General Setup........................................................................................ 211

Application Notes.....................................................................................................................213

A-1 How to Implement the LDAP/AD Authentication for User Management? ......... 213

A-2 How to Configure Customized DDNS?.................................................... 216

II-6 Routing..................................................................................................................................... 220

Web User Interface..................................................................................................................221

II-6-1 Static Route.................................................................................................................... 221

II-6-2 Load-Balance /Route Policy........................................................................................... 226

II-6-2-1 General Setup .......................................................................... 226

II-6-2-2 Diagnose................................................................................. 231

II-6-3 BGP Routing................................................................................................................... 234

II-6-3-1 Basic Settings........................................................................... 234

II-6-3-1 Static Network ......................................................................... 235

Application Notes.....................................................................................................................236

A-1 How to set up Address Mapping with Route Policy? .................................. 236

A-2 How to use destination domain name in a route policy?............................. 238

Part III Wireless LAN ......................................................................................................241

III-1 Wireless LAN (2.4GHz/5GHz) ................................................................................................ 242

Web User Interface..................................................................................................................245

III-1-1 Wireless Wizard............................................................................................................. 245

III-1-2 General Setup ............................................................................................................... 249

III-1-3 Security.......................................................................................................................... 250

III-1-4 Access Control .............................................................................................................. 253

Vigor2862 Series User’s Guide

vii

III-1-5 WPS............................................................................................................................... 255

III-1-6 WDS .............................................................................................................................. 258

III-1-7 Advanced Setting .......................................................................................................... 261

III-1-8 Station Control............................................................................................................... 263

III-1-9 Bandwidth Management................................................................................................ 264

III-1-10 AP Discovery............................................................................................................... 265

III-1-11 Airtime Fairness........................................................................................................... 266

III-1-12 Band Steering.............................................................................................................. 268

III-1-13 Roaming...................................................................................................................... 272

III-1-14 Station List................................................................................................................... 273

Part IV VPN.....................................................................................................................275

IV-1 VPN and Remote Access....................................................................................................... 276

Web User Interface..................................................................................................................277

IV-1-1 VPN Client Wizard ........................................................................................................ 277

IV-1-2 VPN Server Wizard....................................................................................................... 283

IV-1-3 Remote Access Control ................................................................................................ 287

IV-1-4 PPP General Setup....................................................................................................... 288

IV-1-5 IPsec General Setup..................................................................................................... 290

IV-1-6 IPsec Peer Identity........................................................................................................ 291

IV-1-7 Remote Dial-in User...................................................................................................... 293

IV-1-8 LAN to LAN................................................................................................................... 296

IV-1-9 VPN Trunk Management .............................................................................................. 307

IV-1-10 Connection Management............................................................................................ 317

Application Notes.....................................................................................................................318

A-1 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec

Tunnel (Main Mode)............................................................................. 318

IV-2 SSL VPN................................................................................................................................. 323

Web User Interface..................................................................................................................324

IV-2-1 General Setup............................................................................................................... 324

IV-2-2 User Account................................................................................................................. 325

IV-2-3 User Group.................................................................................................................... 329

IV-2-4 Online User Status........................................................................................................ 331

IV-3 Certificate Management..........................................................................................................332

Web User Interface..................................................................................................................333

IV-3-1 Local Certificate ............................................................................................................ 333

IV-3-2 Trusted CA Certificate................................................................................................... 337

IV-3-3 Certificate Backup......................................................................................................... 339

Part V Security...............................................................................................................341

V-1 Firewall.....................................................................................................................................342

Web User Interface..................................................................................................................344

viii

Vigor2862 Series User’s Guide

V-1-1 General Setup................................................................................................................ 344

V-1-2 Filter Setup..................................................................................................................... 349

V-1-3 DoS Defense.................................................................................................................. 360

V-1-4 Diagnose........................................................................................................................ 364

Application Notes.....................................................................................................................367

A-1 How to Configure Certain Computers Accessing to Internet........................ 367

V-2 Central Security Management (CSM)...................................................................................... 371

Web User Interface..................................................................................................................372

V-2-1 APP Enforcement Profile ............................................................................................... 372

V-2-2 APPE Signature Upgrade.............................................................................................. 376

V-2-3 URL Content Filter Profile.............................................................................................. 378

V-2-4 Web Content Filter Profile.............................................................................................. 382

V-2-5 DNS Filter Profile ........................................................................................................... 386

Application Notes.....................................................................................................................388

A-1 How to Create an Account for MyVigor ................................................. 388

A-2 How to Block Facebook Service Accessed by the Use rs via W e b Cont ent Fil ter / UR L

Content Filter.................................................................................... 396

Part VI Management ......................................................................................................401

VI-1 System Maintenance.............................................................................................................. 402

Web User Interface..................................................................................................................403

VI-1-1 System Status...............................................................................................................403

VI-1-2 TR-069 .......................................................................................................................... 405

VI-1-3 Administrator Password................................................................................................ 407

VI-1-4 User Password.............................................................................................................. 409

VI-1-5 Login Page Greeting..................................................................................................... 412

VI-1-6 Configuration Backup.................................................................................................... 414

VI-1-7 Syslog/Mail Alert ........................................................................................................... 418

VI-1-8 Time and Date............................................................................................................... 420

VI-1-9 SNMP............................................................................................................................ 421

VI-1-10 Management............................................................................................................... 423

VI-1-11 Self-Signed Certificate ................................................................................................ 427

VI-1-12 Reboot System............................................................................................................ 429

VI-1-13 Firmware Upgrade ...................................................................................................... 430

VI-1-14 Firmware Backup........................................................................................................ 431

VI-1-15 Modem Code Upgrade................................................................................................ 431

VI-1-16 Activation..................................................................................................................... 431

VI-1-17 Internal Service User List............................................................................................ 433

VI-1-18 Dashboard Control...................................................................................................... 434

VI-2 Bandwidth Management......................................................................................................... 435

Web User Interface..................................................................................................................437

VI-2-1 Sessions Limit...............................................................................................................437

Vigor2862 Series User’s Guide

VI-2-2 Bandwidth Limit............................................................................................................. 439

VI-2-3 Quality of Service.......................................................................................................... 441

VI-2-4 APP QoS....................................................................................................................... 448

Application Notes.....................................................................................................................450

A-1 How to Optimize the Bandwidth through QoS Technology .......................... 450

VI-3 User Management.................................................................................................................. 454

Web User Interface..................................................................................................................455

VI-3-1 General Setup............................................................................................................... 455

VI-3-2 User Profile ................................................................................................................... 457

VI-3-3 User Group.................................................................................................................... 462

VI-3-4 User Online Status........................................................................................................ 463

Application Notes.....................................................................................................................465

A-1 How to authenticate clients via User Management................................... 465

A-2 How to use Landing Page Feature ....................................................... 474

VI-4 Hotspot Web Portal................................................................................................................. 478

Web User Interface..................................................................................................................478

VI-4-1 Profile Setup.................................................................................................................. 478

VI-4-1-1 Login Modes............................................................................ 479

VI-4-1-2 Steps for Configuring a Web Portal Profile....................................... 481

Application Notes.....................................................................................................................494

A-1 How to create Facebook APP for Web Portal Authentication?...................... 494

A-2 How to create Google APP for Web Portal Authentication?......................... 500

VI-5 Central Management (VPN)................................................................................................... 502

Web User Interface..................................................................................................................503

VI-5-1 General Setup............................................................................................................... 503

VI-5-1-1 General Settings....................................................................... 503

VI-5-1-2 IPsec VPN Settings .................................................................... 504

VI-5-2 CPE Management......................................................................................................... 505

VI-5-2-1 Managed Device List.................................................................. 505

VI-5-2-2 CPE Maintenance...................................................................... 508

VI-5-2-3 Google Map............................................................................. 510

VI-5-3 VPN Management......................................................................................................... 512

VI-5-4 Log & Alert .................................................................................................................... 513

Application Notes.....................................................................................................................514

A-1 CVM Application - How to manage the CPE (router) through Vigor2862 series?. 514 A-2 CVM Application - How to build the VPN between remote devices and Vigor 2862

series? ............................................................................................. 518

A-3 CVM Application - How to upgrade CPE firmware through Vigor2862 series?.... 520

VI-6 Central Management (AP)...................................................................................................... 523

Web User Interface..................................................................................................................524

VI-6-1 Dashboard..................................................................................................................... 524

VI-6-2 Status............................................................................................................................ 525

VI-6-3 WLAN Profile................................................................................................................. 526

VI-6-4 AP Maintenance............................................................................................................ 531

VI-6-5 AP Map ......................................................................................................................... 532

Vigor2862 Series User’s Guide

VI-6-6 Traffic Graph................................................................................................................. 537

VI-6-7 Temperature Sensor..................................................................................................... 538

VI-6-8 Rogue AP Detection...................................................................................................... 538

VI-6-9 Event Log......................................................................................................................541

VI-6-10 Total Traffic................................................................................................................. 541

VI-6-11 Station Number........................................................................................................... 542

VI-6-12 Load Balance.............................................................................................................. 542

VI-6-13 Function Support List.................................................................................................. 544

Application Notes.....................................................................................................................545

A-1 How to use AP Management function (in Vigor2862) to check AP status and deploy

WLAN profile..................................................................................... 545

VI-7 Central Management (Switch)................................................................................................ 548

VI-7-1 Status............................................................................................................................ 548

VI-7-1-1 Switch Status .......................................................................... 548

VI-7-1-2 Switch Hierarchy...................................................................... 550

VI-7-2 Profile............................................................................................................................ 551

VI-7-3 Group ............................................................................................................................ 554

VI-7-4 Maintenance.................................................................................................................. 556

VI-7-5 Support List................................................................................................................... 557

VI-8Central Management (External Devices) ................................................................................ 558

VI-8-1 All Devices .................................................................................................................... 558

Part VII Others................................................................................................................561

VII-1 Objects Settings..................................................................................................................... 562

Web User Interface..................................................................................................................563

VII-1-1 IP Object ...................................................................................................................... 563

VII-1-2 IP Group....................................................................................................................... 567

VII-1-3 IPv6 Object................................................................................................................... 568

VII-1-4 IPv6 Group...................................................................................................................570

VII-1-5 Service Type Object..................................................................................................... 571

VII-1-6 Service Type Group..................................................................................................... 573

VII-1-7 Keyword Object............................................................................................................ 575

VII-1-8 Keyword Group............................................................................................................ 577

VII-1-9 File Extension Object................................................................................................... 578

VII-1-10 SMS/Mail Service Object........................................................................................... 580

VII-1-11 Notification Object...................................................................................................... 585

VII-1-12 String Object .............................................................................................................. 587

VII-1-13 Country Object........................................................................................................... 588

Application Notes.....................................................................................................................590

A-1 How to Send a Notification to Specified Phone Number via SMS Service in WAN

Disconnection .................................................................................... 590

VII-2 USB Application..................................................................................................................... 594

Web User Interface..................................................................................................................595

Vigor2862 Series User’s Guide

xii

VII-2-1 USB General Settings.................................................................................................. 595

VII-2-2 USB User Management............................................................................................... 596

VII-2-3 File Explorer................................................................................................................. 598

VII-2-4 USB Device Status....................................................................................................... 599

VII-2-5 Temperature Sensor.................................................................................................... 600

VII-2-6 Modem Support List..................................................................................................... 602

VII-2-7 SMB Client Support List............................................................................................... 603

Application Notes.....................................................................................................................604

A-1 How can I get the files from USB storage device connecting to Vigor router? ... 604

Part VIII Troubleshooting ..............................................................................................607

VIII-1 Diagnostics........................................................................................................................... 608

Web User Interface..................................................................................................................609

VIII-1-1 Dial-out Triggering....................................................................................................... 609

VIII-1-2 Routing Table.............................................................................................................. 610

VIII-1-3 ARP Cache Table ....................................................................................................... 611

VIII-1-4 IPv6 Neighbour Table ................................................................................................. 612

VIII-1-5 DHCP Table................................................................................................................ 613

VIII-1-6 NAT Sessions Table ................................................................................................... 614

VIII-1-7 DNS Cache Table....................................................................................................... 615

VIII-1-8 Ping Diagnosis............................................................................................................ 616

VIII-1-9 Data Flow Monitor....................................................................................................... 617

VIII-1-10 Traffic Graph............................................................................................................. 619

VIII-1-11 VPN Graph................................................................................................................ 620

VIII-1-12 Trace Route .............................................................................................................. 621

VIII-1-13 Syslog Explorer......................................................................................................... 622

VIII-1-14 IPv6 TSPC Status..................................................................................................... 623

VIII-1-15 DSL Status................................................................................................................ 624

VIII-1-16 High Availability Status ............................................................................................. 624

VIII-1-17 Authentication Information........................................................................................ 626

VIII-1-18 DoS Flood Table....................................................................................................... 628

VIII-2 Checking If the Hardware Status Is OK or Not..................................................................... 630

VIII-3 Checking If the Network Connection Settings on Your Computer Is OK or Not................... 631

VIII-4 Pinging the Router from Your Computer .............................................................................. 634

VIII-5 Checking If the ISP Settings are OK or Not ......................................................................... 636

VIII-6 Problems for 3G/4G Network Connection............................................................................ 637

VIII-7 Backing to Factory Default Setting If Necessary.................................................................. 638

VIII-8 Contacting DrayTek.............................................................................................................. 639

Appendix I: VLAN Applications on Vigor Router ............................................................................ 640

Part IX Telnet Commands..............................................................................................649

Accessing Telnet of Vigor2862....................................................................................................... 650

Vigor2862 Series User’s Guide

Index ...............................................................................................................................849

Vigor2862 Series User’s Guide

iii

Paarrtt II II

nssttaallllaattii

This part will introduce Vigor router and guide to install the device in hardware and software.

II--11 IInnttrroodduuccttiioonn

TThhiiss iiss aa ggeenneerriicc IInntteerrnnaattiioonnaall vveerrssiioonn ooff tthhee uusseerr gguuiiddee.. SSppeecciiffiiccaattiioonn,, ccoommppaattiibbiilliittyy aanndd ffeeaattuurreess vvaarryy bbyy rreeggiioonn.. FFoorr ssppeecciiffiicc uusseerr gguuiiddeess ssuuiittaabbllee ffoorr yyoouurr rreeggiioonn oorr pprroodduucctt,, pplleeaassee ccoonnttaacctt llooccaall ddiissttrriibbuuttoorr..

Vigor2862 series is a VDSL2 router. It integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth.

By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly, and offers several protocols (such as IPsec/PPTP/L2TP) with VPN tunnels.

The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set firewall policy with ease. CSM (Content Security Management) provides users control and management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before. By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security outside and control inside. Object-based firewall is flexible and allows your network be safe.

User Management implemented on your router firmware can allow you to prevent any computer from accessing your Internet connection without a username or password. You can also allocate time budgets to your employees within office network.

With the 4-port Gigabit switch on the LAN side provides extremely high speed connectivity for the highest speed local data transfer of any server or local PCs. The tagged VLANs (IEEE802.1Q) can mark data with a VLAN identifier. This identifier can be carried through an onward Ethernet switch to specific ports. The specific VLAN clients can al so pick up this identifier as it is just passed to the LAN. You can set the priorities for LAN-side QoS. You can assign each of VLANs to each of the different IP subnets that the router may also be operating, to provide even more isolation. The said functionality is tag-based Multi-subnet (Multiple-Private LAN Subnets).

On the Wireless-equipped models (Vigor2862n/ac) each of the wireless SSIDs can also be grouped within one of the VLANs.

In addition, Vigor2862 series supports USB interface for c onnecting USB printer to share printing function or 3G USB modem for network connection.

Vigor2862 series provides two-level management to simplify the configuration of network connection. The user mode allows user accessing into WEB interfa ce via simple configuration . However, if users want to have advanced configurations, they can access into WEB interface through admin mode.

Vigor2862 Series User’s Guide

II--11--11 IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss

Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.

II--11--11--11 VViiggoorr22886622 // VViiggoorr22886622BB // VViiggoorr22886622LL

LED Status Explanation

Off The router is powered off. ACT (Activity) Blinking The router is powered on and running normally.

WAN2

QoS

USB1~2 / USB

DSL/DSL 1/2

WCF

LTE

VPN

DMZ On The DMZ function is enabled.

On Internet connection is ready. Off Internet connection is not ready. Blinking The data is transmitting. On The QoS function is active. Off The QoS function is inactive. On USB device is connected and ready for use. Off No USB device is connected. Blinking The data is transmitting. On The router is ready to access Internet through DSL link. Blinking Slowly: The DSL connection is ready.

Quickly: The DSL connection is establishing.

On The Web Content Filter is active. (It is enabled from

Firewall >> General Setup). Off WCF is disabled. On LTE device is connected and ready for use. Off LTE device is not detected, or has serious problem

(e.g., no SIM card, SIM pin error, SIM deactivated, and

etc.). Blinking Slowly: LTE device is in dialing up.

Quickly: The data is transmitting. On The VPN tunnel is active. Off VPN services are disabled Blinking Traffic is passing through VPN tunnel.

Vigor2862 Series User’s Guide

LED on Connector

Left

LAN

LED

1~4

Right LED

Left

WAN2

LED

Right LED

Off The DMZ function is disabled. Blinking The data is transmitting.

On The port is connected. Off The port is disconnected. Blinking The data is transmitting. On The port is connected with 1000Mbps. Off The port is connected with 10/100Mbps On The port is connected. Off The port is disconnected. Blinking The data is transmitting. On The port is connected with 1000Mbps. Off The port is connected with 10/100Mbps

Switch on Rear Side (Available for Vigor2862L)

Interface Description

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is

blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button.

Then the router will restart with the factory default configuration. DSL / DSL 1/2 Connecter for accessing the Internet. LAN 1~4 Connecters for local network devices. WAN2 Connecter for local network devices or modem for accessing Internet. USB 1~2 Connecter for a USB device (for 3G/4G USB Modem or printer or

thermometer). PWR ON/OFF

Connecter for a power adapter.

Power Switch.

Vigor2862 Series User’s Guide

II--11--11--22 VViiggoorr22886622nn//VViiggoorr22886622aacc//VViiggoorr22886622BBnn// VViiggoorr22886622LLnn // VViiggoorr22886622LLaacc

LED Status Explanation

Off The router is powered off. ACT (Activity) Blinking The router is powered on and running normally.

WAN2

QoS

USB

DSL / DSL 1/2

WCF

Quickly: The DSL connection is establishing.

On The Web Content Filter is active. (It is enabled from

Firewall >> General Setup). Off WCF is disabled. On LTE device is connected and ready for use. LTE Off LTE device is not detected, or has serious problem

(e.g., no SIM card, SIM pin error, SIM deactivated, and

Vigor2862 Series User’s Guide

2.4G/5G/WLAN

VPN

DMZ

LED on Connector

Left

LAN

LED

1~4

Right LED

Left

WAN2

LED

Right LED

etc.). Blinking Slowly: LTE device is in dialing up.

Quickly: The data is transmitting. On

2.4G/5G: Wireless access point with bandwidth of

2.4GHz/5GHz is ready.

WLAN: Wireless access point is ready. Off Wireless function is disabled.

Blinking

It will blink slowly while wireless traffic goes through.

ACT and WLAN LEDs blink quickly and simultaneously

when WPS is working, and will return to normal

condition after two minutes. (You need to setup WPS

within 2 minutes.) On The VPN tunnel is active. Off VPN services are disabled. Blinking Traffic is passing through VPN tunnel. On The DMZ function is enabled. Off The DMZ function is disabled. Blinking The data is transmitting.

Vigor2862 Series User’s Guide

Switch on Rear Side (Available for Vigor2862Ln/Lac)

Interface Description

Wireless LAN ON/OFF/WPS

For Vigor2862n/Vigor2862Bn :

 Press the button and release it within 2 seconds. When the

wireless function is ready, the green LED will be on.

 Press the button and release it within 2 seconds to turn off the

WLAN function. When the wireless function is not ready, the

LED will be off. For Vigor2862ac/Vigor2862Ln/Vigor2862Lac:: Wireless band will be switched /changed according to the button

pressed and released. For example,

 2.4G (On) and 5G (On) – in default.  2.4G (Off) and 5G (On) – pressed and released the button once.  2.4G (On) and 5G (Off) – pressed and released the button

twice.

 2.4G (Off) and 5G (Off) – pressed and released the button three

times. When WPS function is enabled by web user interface, press this

button for mor e t h a n 2 seconds to wait for cl ient’s device m aki ng network connection through WPS.

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED

is blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration.

USB 1~2 Connecter for a USB device (for 3G/4G USB Modem or printer or

thermometer).

DSL / DSL 1/2 Connecter for accessing the Internet. LAN 1~4 Connecters for local network devices. WAN2 Connecter for local network devices or modem for accessing

Internet.

PWR Connecter for a power adapter. ON/OFF Power Switch.

Vigor2862 Series User’s Guide

II--11--11--33 VViiggoorr22886622VVaacc

LED Status Explanation

USB

WAN2

DSL

2.4G/5G

Line

Phone 1/2

LED on Connector

Left LAN 1~4

WAN2

LED

Right

LED

Left

LED

Right

LED

Off The router is powered off. ACT (Activity) Blinking The router is powered on and running normally. On USB device is connected and ready for use. Off No USB device is connected. Blinking The data is transmitting. On Internet connection is ready. Off Internet connection is not ready. Blinking The data is transmitting. On The router is ready to access Internet through DSL link. Blinking Slowly: The DSL connection is ready.

Quickly: The connection is training.

On 2.4G/5G: Wireless access point with bandwidth of

2.4GHz/5GHz is ready. WLAN: Wireless access point is ready.

Blinking It will blink slowly while wireless traffic goes through.

ACT and WLAN LEDs blink quickly and simultaneously when WPS is working, and will return to normal condition after two minutes. (You need to setup WPS within 2 minutes.)

On A PSTN phone call comes (in and out). However, when

the phone call is disconnected, the LED will be off. Off There is no PSTN phone call. On The phone connected to this port is off-hook. Off The phone connected to this port is on-hook. Blinking A phone call comes.

Vigor2862 Series User’s Guide

Interface Description

Wireless LAN ON/OFF/WPS

Wireless band will be switched /changed according to the button pressed and released. For example,

 2.4G (On) and 5G (On) – in default.  2.4G (Off) and 5G (On) – pressed and released the button once.  2.4G (On) and 5G (Off) – pressed and released the button

twice.

 2.4G (Off) and 5G (Off) – pressed and released the button three

times.

When WPS function is enabled by web user interface, press this button for mor e t h a n 2 seconds to wait for cl ient’s device m aki ng network connection through WPS.

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED

is blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory

default configuration. DSL Connecter for accessing the Internet. LAN 1~4 Connecters for local network devices. WAN2 Connecter for local network devices or modem for accessing

Internet. USB 1~2 Connecter for a USB device (for 3G/4G USB Modem or printer or

thermometer). Phone 1/2 Connecter for analog phone(s). Line Connector for PSTN life line. PWR Connecter for a power adapter. ON/OFF Power Switch.

Vigor2862 Series User’s Guide

“

II--11--22 NNootteess ffoorr AAnntteennnnaa IInnssttaallllaattiioonn ((ffoorr

Magnetic antenna must be installed on the extension base before connecting to Vigor router.

Extension Base

There are two mounting holes for installing antennas with extension base on Vigor router. Please install them as shown below.

”

“

”

mmooddeell))

Major Signal Transmitted Hole

SIM Card Slot

Extension Base

Note, if only one antenna shall be installed, please use the mounting hole (major signal transmitted hole) near to the SIM card slot.

Vigor2862 Series User’s Guide

While installing the SIM card into the card slot, note that back plate of the SIM card slot must be removed first and the direction of card notch must be on the left side.

There are two types of antennas provided for Vigor2862Ln/Vigor2862Lac, whi ch must be installed in different locations carefully and correctly. Wrong installation might cause bad signal of wireless connection. Therefore, pay attention to the installation of antennas by referring to the following illustration.

SMA jack for LTE Antenna (with

extension base)

SMA jack for WLAN

Antenna

Vigor2862 Series User’s Guide

II--22 HHaarrddwwaarree IInnssttaallllaattiioonn

II--22--11 IInnssttaalllliinngg VViiggoorr RRoouutteerr

Before starting to configure the router, you have to connect your devices correctly.

1. Connect the DSL interface to the land line jack with a DSL line cable. Connect the cable Modem/DSL Modem/Media Converter to the WAN port of router with

Ethernet cable (RJ-45).

2. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router and

the other end of the cable (RJ-45) into the Ethernet port on your computer.

3. Connect one end of the power adapter to the router’s power port on the rear panel, and

the other side into a wall outlet.

4. Power on the device by pressing down the power switch on the rear panel.

5. The system starts to initiate. After completing the system test, the ACT LED will light up

and start blinking.

(For the hardware connection, we take “ac” model as an example.)

Vigor2862 Series User’s Guide

II--22--22 WWaallll--MMoouunntteedd IInnssttaallllaattiioonn

Vigor router has keyhole type mounting slots on the underside.

1. A template is provided on the Vigor router packaging box to enable you to space the

screws correctly on the wall.

2. Place the template on the wall and drill the holes according to the recommended

instruction.

3. Fit screws into the wall using the appropriate type of wall plug.

Info

4. When you finished about procedure, the router has been mounted on the wall firmly.

The recommended drill diameter shall be 6.5mm (1/4”).

Vigor2862 Series User’s Guide

II--22--33 IInnssttaalllliinngg UUSSBB PPrriinntteerr ttoo VViiggoorr RRoouutteerr

You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made ba sed on Windows 7. For other Windows system, please visit www.DrayTek.com.

Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).

1. Connect the printer with the router through USB/parallel port.

2. Open All Programs>>Getting Started>>Devices and Printers.

3. Click Add a printer.

Vigor2862 Series User’s Guide

4. A dialog will appear. Click Add a local printer and click Next.

5. In this dialog, choose Create a new port. In the field of Type of port, use the drop down

list to select Standard TCP/IP Port. Then, click Next.

Vigor2862 Series User’s Guide

+ 844 hidden pages

DrayTek Vigor2862-B Service Manual

Specifications and Main Features

Frequently Asked Questions

User Manual