Draytek VIGOR2910 User Manual

Vigor2910

Dual-WAN Security Router

User’s Guide

Version: 2.0

Date: 2006/7/24

This publication contains information that is protected by copyright. No part may be reproduced, transmitted,

transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright

holders. The scope of delivery and other details are subject to change without prior notice.

Microsoft is a registered trademark of Microsoft Corp.

Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.

Apple and Mac OS are registered trademarks of Apple Computer Inc.

Other products may be trademarks or registered trademarks of their respective manufacturers.

TTaabbllee ooff CCoonntteennttss

Preface ...............................................................................................................1

1.1 Web Configuration Buttons Explanation.................................................................................1

1.2 LED Indicators and Connectors.............................................................................................. 1

1.2.1 For Vigor2910................................................................................................................... 2

1.2.2 For Vigor2910G................................................................................................................ 3

1.2.3 For Vigor2910V................................................................................................................. 4

1.2.4 For Vigor2910VG.............................................................................................................. 5

1.3 Hardware Installation .............................................................................................................. 6

Configuring Basic Settings ..............................................................................7

2.1 Changing Password................................................................................................................ 7

2.2 Quick Start Wizard.................................................................................................................. 9

2.2.1 PPPoE ............................................................................................................................ 10

2.2.2 PPTP............................................................................................................................... 12

2.2.3 Static IP........................................................................................................................... 13

2.2.4 DHCP.............................................................................................................................. 14

2.3 Online St atus......................................................................................................................... 15

2.4 Saving Configuration............................................................................................................. 17

A d v a n c e d We b C o n f i g u r at i o n..................................................................................19

3.1 WAN...................................................................................................................................... 19

3.1.1 Basics of Internet Protocol (IP) Network......................................................................... 19

3.1.2 General Setup................................................................................................................. 20

3.1.3 Internet Access............................................................................................................... 21

3.1.4 Load-Balance Policy.......................................................................................................29

3.2 LAN ....................................................................................................................................... 32

3.2.1 Basics of LAN ................................................................................................................. 32

3.2.2 General Setup................................................................................................................. 34

3.2.3 Static Route.................................................................................................................... 36

3.3 NAT ....................................................................................................................................... 39

3.3.1 Port Redirection.............................................................................................................. 40

3.3.2 DMZ Host........................................................................................................................ 42

3.3.3 Open Ports...................................................................................................................... 44

3.4 Firewall.................................................................................................................................. 46

3.4.1 Basics for Firewall........................................................................................................... 46

3.4.2 General Setup................................................................................................................. 49

3.4.3 Filter Setup ..................................................................................................................... 51

3.4.4 DoS Defense .................................................................................................................. 56

3.4.5 URL Content Filter.......................................................................................................... 58

Vigor2910 Series User’s Guide

3.4.6 Web Content Filter.......................................................................................................... 61

3.4.6 Bind IP to MAC............................................................................................................... 62

3.5 Objects Settings.................................................................................................................... 63

3.5.1 IP Object......................................................................................................................... 63

3.5.2 IP Group ......................................................................................................................... 65

3.5.3 Service Type Object .......................................................................................................66

3.5.4 Service Type Group........................................................................................................67

3.5.5 CSM Profile..................................................................................................................... 68

3.6 Bandwidth Management....................................................................................................... 69

3.6.1 Limit Session .................................................................................................................. 69

3.6.2 Limit Bandwidth .............................................................................................................. 70

3.6.3 Quality of Service............................................................................................................ 72

3.7 Applications........................................................................................................................... 80

3.7.1 Dynamic DNS................................................................................................................. 80

3.7.2 Schedule......................................................................................................................... 82

3.7.3 RADIUS.......................................................................................................................... 84

3.7.4 UPnP............................................................................................................................... 85

3.7.5 Wake On LAN................................................................................................................. 86

3.8 VPN and Remote Access...................................................................................................... 88

3.8.1 Remote Access Control.................................................................................................. 88

3.8.2 PPP General Setup ........................................................................................................ 88

3.8.3 IPSec General Setup...................................................................................................... 89

3.8.4 IPSec Peer Identity......................................................................................................... 90

3.8.5 Remote User Profiles......................................................................................................93

3.8.6 LAN to LAN..................................................................................................................... 96

3.8.7 Connection Management.............................................................................................. 104

3.9 Certificate Management...................................................................................................... 105

3.9.1 Local Certificate............................................................................................................ 105

3.9.2 Trusted CA Certificate .................................................................................................. 107

3.9.3 Certificate Backup......................................................................................................... 108

3.10 VoIP................................................................................................................................... 109

3.10.1 DialPlan ...................................................................................................................... 110

3.10.2 SIP Accounts.............................................................................................................. 113

3.10.3 Phone Settings ........................................................................................................... 116

3.10.4 Status.......................................................................................................................... 122

3.1 1 Wireless LAN..................................................................................................................... 124

3.11.1 Basic Concepts........................................................................................................... 124

3.11.2 General Settings......................................................................................................... 127

3.11.3 Security....................................................................................................................... 129

3.11.4 Access Control............................................................................................................ 131

3.11.5 WDS............................................................................................................................ 132

3.11.6 AP Discovery.............................................................................................................. 134

3.11.7 Station List.................................................................................................................. 135

3.11.8 Station Rate Control ................................................................................................... 136

3.12 VLAN................................................................................................................................. 136

3.12.1 Wired VLAN................................................................................................................ 136

3.12.2 Wireless VLAN............................................................................................................ 137

3.12.3 VLAN Cross Setup...................................................................................................... 141

3.12.4 Wireless Rate Control................................................................................................. 142

3.13 System Maintenance......................................................................................................... 143

3.13.1 System Status............................................................................................................. 143

Vigor2910 Series User’s Guide

iii

3.13.2 Administrator Password.............................................................................................. 144

3.13.3 Configuration Backup ................................................................................................. 144

3.13.4 Syslog/Mail Alert......................................................................................................... 146

3.13.5 Time and Date............................................................................................................ 148

3.13.6 Management............................................................................................................... 149

3.13.7 Reboot System........................................................................................................... 150

3.13.8 Firmware Upgrade...................................................................................................... 151

3.14 Diagnostics........................................................................................................................ 152

3.14.1 Dial-out Trigger........................................................................................................... 152

3.14.2 Routing Table ............................................................................................................. 152

3.14.3 ARP Cache Table....................................................................................................... 153

3.14.4 DHCP Table................................................................................................................ 153

3.14.5 NAT Sessions Table................................................................................................... 154

3.14.6 Wireless VLAN Online Station Table.......................................................................... 155

3.14.7 Ping Diagnosis............................................................................................................ 156

3.14.8 Data Flow Monitor....................................................................................................... 156

3.14.9 Trace Route................................................................................................................ 158

Application and Examples............................................................................159

4.1 Create a LAN-to-LAN Connection Between Remote Office and Headquarter................... 159

4.2 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter...... 166

4.3 QoS Setting Example.......................................................................................................... 170

4.4 LAN – Created by Using NAT ............................................................................................. 172

4.5 Calling Scenario for VoIP function ...................................................................................... 174

4.5.1 Calling via SIP Sever.................................................................................................... 174

4.5.2 Peer-to-Peer Calling..................................................................................................... 176

4.6 Upgrade Firmware for Y our Router..................................................................................... 178

4.7 Request a certificate from a CA server on Windows CA Server......................................... 180

4.8 Request a CA Certificate and Set as Trusted on Windows CA Server............................... 184

Trouble Shooting...........................................................................................187

5.1 Checking If the Hardware Status Is OK or Not....................................................................187

5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not................. 187

5.3 Pinging the Router from Your Computer............................................................................. 190

5.4 Checking If the ISP Settings are OK or Not........................................................................ 192

5.5 Backing to Factory Default Setting If Necessary ................................................................ 193

5.6 Contacting Your Dealer ....................................................................................................... 194

Vigor2910 Series User’s Guide

Prreeffaaccee

The Vigor2910 series router provides Dual-WAN interface (which is a configuration second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (SuperG Object-oriented firewall is flexible and allows your network be safe. In addition, through VoIP function, the communication fee for you and remote people can be reduced.

11..11 WWeebb CCoonnffiigguurraattiioonn BBuuttttoonnss EExxppllaannaattiioonn

Several main buttons appeared on the web pages are defined as the following:

Save and apply current settings.

Canncel current settings and recover to the previous saved settings.

Discard current settings and allow users to input settings again.

Add new settings for specified item.

Edit the settings for the selected item.

Delete the selected item with the corresponding settings.

Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed explanation.

11..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss

Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.

The displays of LED indicators and connectors for the routers are different slightly. The following sections will introduce them respectively.

Vigor2910 Series User’s Guide

11..22..11 FFoorr VViiggoorr22991100

LLEEDD EExxppllaannaattiioonn

DMZ

LED Status Explanation

ACT (Activity)

DMZ On DMZ Host is specified in certain site.

VPN On The VPN tunnel is launched. Printer On The USB interface printer is ready. WAN(W1-W2)

LAN (P1, P2, P3, P4)

QoS

Attack VPN

Printer

WAN

W2 P1

Blinking Off

On The QoS function is active. QoS Off The QoS function is inactive. On DoS Defense function is active. Attack

Blinking An attack is detected.

Orange A normal 10Mbps WAN link is ready. Green A normal 100Mbps WAN link is ready. Blinking Ethernet packets are transmitting. Orange A normal 10Mbps connection is through its

Green A normal 100Mbps connection is through its

Blinking Ethernet packets are transmitting.

LAN

P2 P3 P4

The router is powered on and running prope r l y . The router is powered off.

corresponding port.

CCoonnnneeccttoorr EExxppllaannaattiioonn

Printer

PWR

P2P3

P1/W2

Interface Description

Printer Connecter for a USB printer. PWR Connecter for a power adapter with 12-15VDC. ON/OFF Power Switch. LAN P4 – P1 Connecters for local networked devices. W2/W1 Connecter for accessing Internet with the ADSL,ADSL2/2+ line Factory Reset Restore the default settings.

Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration.

Factory ResetW1

Vigor2910 Series User’s Guide

11..22..22 FFoorr VViiggoorr22991100GG

LLEEDD EExxppllaannaattiioonn

DMZ

LED Status Explanation

DMZ On DMZ Host is specified in certain site.

WLAN

Printer On The USB interface printer is ready. WAN(W1-W2)

LAN (P1, P2, P3, P4)

QoS

Attack WLAN

Printer

WAN

W2 P1

Blinking The router is powered on and running prope r l y . ACT (Activity) Off The router is powered off.

On The QoS function is active. QoS Off The QoS function is inactive. On DoS Defense function is active. Attack

Blinking An attack is detected. On Wireless access point is ready. Blinking Wireless traffic goes through. Off Wireless access point is turned off.

Orange A no rmal 10Mbps WAN link is ready. Green A normal 100Mbps WAN link is ready. Blinking Ethernet packets are transmitting.

Orange A normal 10Mbps connection is through its corresponding

Green A normal 100Mbps connection is through its

Blinking Ethernet packets are transmitting.

LAN

P2 P3 P4

port.

corresponding port.

CCoonnnneeccttoorr EExxppllaannaattiioonn

Printer

PWR

P2P3P4

P1/W2

Interface Description

Printer Connecter for a USB printer. PWR Connecter for a power adapter with 12-15VDC. ON/OFF Power Switch.

LAN P4 – P1 Connecters for local networked devices. W2/W1 Connecter for accessing Internet with the ADSL,ADSL2/2+ line

Factory Reset Restore the default settings.

Factory Reset

Vigor2910 Series User’s Guide

11..22..33 FFoorr VViiggoorr22991100VV

LLEEDD EExxppllaannaattiioonn

CT DMZ

LED Status Explanation

ACT (Activity)

DMZ On

VPN On The VPN tunnel is launched. Printer On The USB interface printer is ready. WAN(W1-W2)

LAN (P1, P2, P3, P4)

FXS1

Phone

VPN Printer P2 P3 P4

FXS2

Blinking

WAN

The router is powered on and running prope r l y .

Off The router is powered off.

DMZ Host is specified in certain site. On The phone is off hook (the handset of phone is hanging). FXS1/FXS2 Blinking A phone call is incoming or on-line.

Orange Green Blinking

Orange

A normal 10Mbps WAN link is ready.

A normal 100Mbps WAN link is ready.

Ethernet packets are transmitting.

A normal 10Mbps connection is through its corresponding

port. Green

A normal 100Mbps connection is through its corresponding

port. Blinking

Ethernet packets are transmitting.

W2 P1

LAN

CCoonnnneeccttoorr EExxppllaannaattiioonn

Printer

PWR

FXS2 FXS1

Factory

W1P1/W2P2P3P4

Reset

Interface Description

Printer Connecter for a USB printer. PWR Connecter for a power adapter with 12-15VDC. ON/OFF Power Switch. FXS2 & FXS1 Connecters for telephone set and analog phone with VoIP communication. LAN P4 – P1 Connecters for local networked devices. W2/W1 Connecter for accessing Internet with the ADSL,ADSL2/2+ line Factory Reset Restore the default settings.

Vigor2910 Series User’s Guide

11..22..44 FFoorr VViiggoorr22991100VVGG

LLEEDD EExxppllaannaattiioonn

CT DMZ

LED Status Explanation

DMZ On

WLAN

Printer On The USB interface printer is ready. WAN(W1-W2)

LAN (P1, P2, P3, P4)

FXS1

Phone

FXS2

WLAN

Printer

WAN

Blinking The router is powered on and running properly. ACT (Activity) Off The router is powered off.

DMZ Host is specified in certain site.

On The phone is off hook (the handset of ph o ne i s ha nging). FXS1/FXS2 Blinking A phone call is incoming or on-line. On Wireless access point is ready. Blinking Wireless traffic goes through. Off Wireless access point is turned off.

Orange A normal 10Mbps WAN link is ready. Green A normal 100Mbps WAN link is ready. Blinking Ethernet packets are transmitting.

Orange A normal 10Mbps connection is through its corresponding port. Green A normal 100Mbps connection is through its corresponding

port.

Blinking Ethernet packets are transmitting.

W2 P1

LAN

P2 P3 P4

CCoonnnneeccttoorr EExxppllaannaattiioonn

Printer

PWR

FXS2 FXS1

P1/W2P2P3

Factory Reset

Interface Description

Printer Connecter for a USB printer. PWR Connecter for a power adapter with 12-15VDC. ON/OFF Power Switch. FXS2 & FXS1 Connecters for telephone set and the analog phone with VoIP communicati on.

LAN P4 – P1 Connecters for local networked devices. W2/W1 Connecter for accessing Internet with the ADSL,ADSL2/2+ line

Factory Reset Restore the default settings.

Vigor2910 Series User’s Guide

11..33 HHaarrddwwaarree IInnssttaallllaattiioonn

Before starting to configure the router, you have to connect your devices correctly.

1. Connect this device to a router/modem with an Ethernet cable.

2. Connect one port of 4-port switch to your computer with a RJ-45 cable. This device

allows you to connect 4 PCs directly.

3. Connect one end of the power cord to the power port of this device. Connect the other

end to the wall outlet of electricity.

4. Connect the telephone sets with phone lines (for using VoIP function). For the user of

the model without VoIP ports, skip this step.

5. Connect the ISDN NT1/1+ box with ISDN cable. This connection is available for

Europe only.

6. Power on the router.

7. Check the ACT LED to assure network connections. (For the detailed information of LED status, please refer to section 1.1.)

Analog Phone Analog Phone

ADSL2+

WLAN

Link

QoS

Data

Printer

PWR

Phone Line

FXS2 FXS1

P1/W2P2P3

Cable/DSL

Modem

ISDN

Factory Reset

Internet

NT1/1+

ISDN

Caution: Each of the FXS ports can be connected to an analog phone only. Do not connect the FXS ports to the telephone wall jack. This connection might damage your router.

Vigor2910 Series User’s Guide

Coonnffiigguurriinngg

For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings.

This chapter explains how to setup a password for an administrator and how to adjust basic settings for accessing Internet successfully. Be aware that only the administrator can change the router configuration.

22..11 CChhaannggiinngg PPaasssswwoorrdd

To change the password for this device, you have to access into the web browse with default password first.

1. Make sure your computer connects to the router correctly.

Notice: You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section - Trouble Shooting of this guide.

Baassiicc

Seettttiinnggss

2. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will

open to ask for username and password. Please type default values (both username and password are Null) on the window for the first time accessing and click OK for next screen.

3. Now, the Main Screen will pop up. Notice that the main screen differs according to the

model of the router that you have. Below is an example.

Vigor2910 Series User’s Guide

4. Go to System Maintenance page and choose Administrator Password.

5. Enter the login password (the default is blank) on the field of Old Password. Type a

new one in the field of New Password and retype it on the field of Retype New Password. Then click OK to continue.

6. Now, the password has been changed. Next time, use the new password to access the

Web Configurator for this router.

Vigor2910 Series User’s Guide

22..22 QQuuiicckk SSttaarrtt WWiizzaarrdd

If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next.

On the next page as shown below, please select the WAN interface that you use. Choose Auto negotiation as the physical type for your router. Then click Next for next step.

On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step.

Vigor2910 Series User’s Guide

In the Quick Start Wizard, you can configure the router to access the Internet with different protocol/modes such as PPPoE, PPTP, Static IP or DHCP. The router supports the DSL WAN interface for Internet access.

22..22..11 PPPPPPooEE

PPPoE stands for Point-to-Point Protocol over Ethernet. It relies on two widely accepted standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a common broadband medium, such as a single DSL line, wireless device or cable modem. All the users over the Ethernet can share a common connection.

PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet. Your service provider will provide you information about user name, password, and authentication mode.

If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown:

User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Retype Password Retype the password. Click Next for viewing summary of such connection.

Vigor2910 Series User’s Guide

Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

Vigor2910 Series User’s Guide

22..22..22 PPPPTTPP

Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol.

Click Next for viewing summary of such connection.

Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

Vigor2910 Series User’s Guide

22..22..33 SSttaattiicc IIPP

Click Static IP as the protocol. Type in all the information that your ISP provides for this protocol.

After finishing the settings in this page, click Next to see the following page.

Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

Vigor2910 Series User’s Guide

22..22..44 DDHHCCPP

Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol.

After finishing the settings in this page, click Next to see the following page.

Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.

Vigor2910 Series User’s Guide

22..33 OOnnlliinnee SSttaattuuss

The online status shows the system status, WAN status, ADSL Information and other status related to this router within one page. If you select PPPoE as the protocol, you will find out a button of Dial PPPoE or Dial PPPoE in the Online Status web page.

Online status for PPPoE

Online status for PPTP (for WAN2)

Online status for Static IP(for WAN1)

Vigor2910 Series User’s Guide

Online status for DHCP

Detailed explanation is shown below:

Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS.

LAN Status

IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface. RX Packets Displays the total number of received packets at the LAN interface.

WAN1/2 Status

Line Displays the physical connection (Ethernet) of this interface. Name Displays the name set in WAN1/WAN web page. Mode Displays the type of WAN connection (e.g., PPPoE). Up Time Displays the total uptime of the interface. IP Displays the IP address of the WAN interface. GW IP Displays the IP address of the default gateway. TX Packets Displays the total transmitted packets at the WAN interface. TX Rate Displays the speed of transmitted octets at the WAN interface. RX Packets Displays the total number of received packets at the WAN

interface.

RX Rate Displays the speed of received octets at the WAN interface.

Note: The words in green mean that the WAN connection of that interface

(WAN1/WAN2) is ready for accessing Internet; the words in red mean that the WAN connection of that interface (WAN1/WAN2) is not ready for accessing Internet.

Vigor2910 Series User’s Guide

22..44 SSaavviinngg CCoonnffiigguurraattiioonn

Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you.

Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button.

Vigor2910 Series User’s Guide

This page is left blank.

Vigor2910 Series User’s Guide

Addvvaanncceedd

After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suiting his/her request, please refer to this chapter for getting detailed information about the advanced configuration of this router. As for other examples of application, please refer to chapter 4.

33..11 WWAANN

33..11..11 BBaassiiccss ooff IInntteerrnneett PPrroottooccooll ((IIPP)) NNeettwwoorrkk

Quick Start Wizard offers user an easy method to quick setup the connection mode for the router. Moreover, if you want to adjust more settings for different WAN modes, please go to WAN group and click the Internet Access link.

IP means Internet Protocol. Every device in an IP-based Network including routers, print server, and host PCs, needs an IP address to identify its location on the network. To avoid address conflicts, IP addresses are publicly registered with the Network Information Centre (NIC). Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP/IP local area networks (LANs), such as host PCs under the management of a router since they do not need to be accessed by the public. Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges:

Weebb

Coonnffiigguurraattiioonn

From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255

WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss

As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts. Meanwhile, Vigor router will communicate with other network devices through a public IP address. When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network. Thus, all the host PCs can share a common Internet connection.

GGeett YYoouurr PPuubblliicc IIPP AAddddrreessss ffrroomm IISSPP

In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is required for bridging customer premises equipment (CPE). Point to Point Protocol over Ethernet (PPPoE) connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator. This implementation provides users with significant ease of use. Meanwhile it provides access control, billing, and type of service according to user requirement.

When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP.

Vigor2910 Series User’s Guide

Below shows the menu items for Internet Access.

33..11..22 GGeenneerraall SSeettuupp

This section will introduce some general settings of Internet and explain the connection modes for WAN1 and WAN2 in details.

This router supports dual WAN function. It allows users to access Internet and combine the bandwidth of the dual WAN to speed up the transmission through the network. Each WAN port (WAN1- through WAN port/WAN2- through LAN1 port) can connect to different ISPs, Even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable modem, etc.). If any connection problem occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation. Please configure WAN1 and WAN2 settings.

This webpage allows you to set general setup for WAN1 and WAN respectively.

Note: In default, WAN1 is enabled. WAN2 is optional.

Enable Choose Yes to invoke the settings for this WAN interface.

Choose No to disable the settings for this WAN interface.

Display Name Type the description for the WAN1/WAN2 interface. Physical Mode For WAN1, the physical connection is done through ADSL

port; yet the physical connection for WAN2 is done through an Ethernet port (P1). You cannot change it.

Vigor2910 Series User’s Guide

Physical Type You can change the physical type for WAN2 or choose Auto

negotiation for determined by the system.

Load Balance Mode If you know the practical bandwidth for your WAN interface,

please choose the setting of According to Line Speed. Otherwise, please choose Auto Weigh to let the router reach the best load balance.

Line Speed If your choose According to Line Speed as the Load

Balance Mode, please type the line speed for downloading

and uploading through WAN1/WAN2. The unit is kbps.

Active Mode Choose Always On to make the WAN connection

(WAN1/WAN2) being activated always; or choose Active on demand to make the WAN connection (WAN1/WAN2) activated if it is necessary.

If you choose Active on demand, the Idle Timeout will be available for you to set for PPPoE and PPTP access modes in the Details Page of WAN>>Internet Access. In addition, there are three selections for you to choose for different purposes. WAN2 Fail – It means the connection for WAN1 will be activated when WAN2 is failed. WAN2 Upload speed exceed XX kbps – It means the connection for WAN1 will be activated when WAN2 Upload speed exceed certain value that you set in this box for 15 seconds. WAN2 Download speed exceed XX kbps– It means the connection for WAN1 will be activated when WAN2 Download speed exceed certain value that you set in this box for 15 seconds. WAN1 Fail – It means the connection for WAN2 will be activated when WAN1 is failed. WAN1 Upload speed exceed XX kbps – It means the connection for WAN2 will be activated when WAN1 Upload speed exceed certain value that you set in this box for 15 seconds. WAN1 Download speed exceed XX kbps– It means the connection for WAN2 will be activated when WAN1 Download speed exceed certain value that you set in this box for 15 seconds.

33..11..33 IInntteerrnneett AAcccceessss

Vigor2910 Series User’s Guide

For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to different physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly.

Index It shows the WAN modes that this router supports. WAN1 is the

default WAN interface for accessing into the Internet. WAN2 is the optional WAN interface for accessing into the Internet when WAN 1 is inactive for some reason.

Display Name It shows the name of the WAN1/WAN2 that entered in general

setup.

Physical Mode It shows the physical port for WAN1/WAN2. Access Mode Use the drop down list to choose a proper access mode. The details

page of that mode will be popped up. If not, click Details Page for accessing the page to configure the settings.

There are three access modes provided for PPPoE, Static or Dynamic IP and PPTP.

Details Page This button will open different web page according to the access

mode that you choose in WAN1 or WAN2.

Vigor2910 Series User’s Guide

DDeettaaiillss PPaaggee ffoorr PPPPPPooEE

To use PPPoE as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown.

PPPoE Client Mode Click Enable for activating this function. If you click Disable, this

function will be closed and all the settings that you adjusted in this page will be invalid.

ISP Access Setup Enter your allocated username, password and authentication

parameters according to the information provided by your ISP. If you want to connect to Internet all the time, you can check Always

On. Username – Type in the username provided by ISP in this field. Password – Type in the password provided by ISP in this field. Index (1-15) in Schedule Setup - You can type in four sets of time

schedule for your request. All the schedules can be set previously in Application – Schedule web page and you can use the number that you have set in that web page.

ISDN Dial Backup Setup

This setting is available for the routers supporting ISDN function only. Before utilizing the ISDN dial backup feature, you must create a dial backup profile first. Please click Internet Access Setup > Dialing to a Single ISP to enter the backup profile.

This setting is available for i model only. Due to the absence of the ISDN interface in some models, the

ISDN dial backup feature and its associated setup options are not available to them. Please refer to the previous part for further information.

None - Disable the backup function. Packet Trigger -The backup line is not on until a packet from a

local host triggers the router to establish a connection.

Vigor2910 Series User’s Guide

Always On - If the broadband connection is no longer available, the backup line will be activated automatically and always on until the broadband connection is restored. We recommend you to enable this feature if you host a web server for your customers’ access.

PPP/MP Setup PPP Authentication – Select PAP only or PAP or CHAP for

PPP. Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action. This setting is active only when the Active on demand option for Active Mode is selected in WAN>> General Setup page.

IP Address Assignment Method (IPCP)

Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function.

WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using.

Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address. Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually.

After finishing all the settings here, please click OK to activate them.

DDeettaaiillss PPaaggee ffoorr SSttaattiicc oorr DDyynnaammiicc IIPP

Vigor2910 Series User’s Guide

For static IP mode, you usually receive a fixed public IP address or a public subnet, namely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service provider will offer a public subnet. If you have a public subnet, you could assign an IP address or many IP address to the WAN interface.

To use Static or Dynamic IP as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select Static or Dynamic IP mode for WAN2. The following web page will be shown.

Static or Dynamic IP (DHCP Client)

ISDN Dial Backup Setup

Click Enable for activating this function. If you click Disable, this function will be closed and all the settings that you adjusted in this page will be invalid.

Due to the absence of the ISDN interface in some models, the ISDN dial backup feature and its associated setup options are not available to them. Please refer to the previous part for further information.

None - Disable the backup function. Packet Trigger -The backup line is not on until a packet from a

local host triggers the router to establish a connection. Always On - If the broadband connection is no longer available, the backup line will be activated automatically and always on until the broadband connection is restored. We recommend you to

Vigor2910 Series User’s Guide

enable this feature if you host a web server for your customers’ access.

Keep WAN Connection

Normally, this function is designed for Dynamic IP environments because some ISPs will drop connections if there is no traffic within certain periods of time. Check Enable PING to keep alive box to activate this function. PING to the IP - If you enable the PING function, please specify the IP address for the system to PING it for keeping alive. PING Interval - Enter the interval for the system to execute the PING operation.

RIP Protocol Routing Information Protocol is abbreviated as RIP（RFC1058）

specifying how routers exchange routing tables information. Click

Enable RIP for activating this function.

WAN IP Network Settings

This group allows you to obtain an IP address automatically and allows you type in IP address manually.

Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode.

Router Name: Type in the router name provided by ISP. Domain Name: Type in the domain name that you have assigned.

Specify an IP address – Click this radio button to specify some data if you want to use Static IP mode.

IP Address: Type the IP address. Subnet Mask: Type the subnet mask. Gateway IP Address: Type the gateway IP address. Default MAC Address : Click this radio button to use default MAC

address for the router. Specify a MAC Address: Some Cable service providers specify a

Vigor2910 Series User’s Guide

+ 169 hidden pages

Draytek VIGOR2910 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual