Page 1
Page 2
Vigor2912 Series User’s Guide
ii
Page 3
Vigor2912 Series User’s Guide
iii
Vigor2912 Series
Dual-WAN Security Router
User’s Guide
Version: 1.0
Firmware Version: V3.7.3_RC5
(For future update, please visit DrayTek web site)
Date: 18/09/2013
Page 4
Vigor2912 Series User’s Guide
iv
Copyright Information
Copyright
Declarations
Copyright 2013 All rights reserved. This publication contains information that is
protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a
retrieval system, or translated into any language without written permission from the
copyright holders.
Trademarks
The following trademarks are used in this document:
z Microsoft is a registered trademark of Microsoft Corp.
z Windows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are
trademarks of Microsoft Corp.
z Apple and Mac OS are registered trademarks of Apple Inc.
z Other products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety
Instructions
z Read the installation guide thoroughly before you set up the router.
z The router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
z Do not place the router in a damp or humid place, e.g. a bathroom.
z The router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
z Do not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
z Do not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
z Keep the package out of reach of children.
z When you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, dam aged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revi se the m anual and onli ne
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.
Be a Registered
Owner
Web registration is preferred. You can register your Vigor router via
http://www.DrayTek.com.
Firmware & Tools
Updates
Due to the continuous evolution of DrayTek technology, all routers will be regularly
upgraded. Please consult the DrayTek web site for more information on newest
firmware, tools and documents.
http://www.DrayTek.com
Page 5
Vigor2912 Series User’s Guide
v
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, Hukou Township, Hsinchu Industrial Park, Hsinchu County, Taiwan 303
Product: Vigor2912 Series Router
DrayTek Corp. declares that Vigor2912 Series of routers are in compliance with the following essential
requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoH S 201 1/65/EU
.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by
complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or televisio n recept i on , whi ch can be determined by turning the equipment of f and
on, the user is encouraged to try to correct the interference by one of the following measures:
z Reorient or relocate the receiving antenna.
z Increase the separation between the equipment and receiver.
z Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
z Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
Please visit http://www.draytek.com/user/SupportDLRTTECE.php
This product is designed for 2.4GHz WLAN net work throughout the EC region.
Page 6
Vigor2912 Series User’s Guide
vi
Page 7
Vigor2912 Series User’s Guide
vii
TTaabbllee ooff CCoonntteennttss
Introduction...................................................................................................1
1.1 Web Configuration Buttons Explanation................................................................................. 2
1.2 LED Indicators and Connectors..............................................................................................3
1.2.1 For Vigor2912................................................................................................................... 3
1.2.2 For Vigor2912n................................................................................................................. 5
1.3 Hardware Installation .............................................................................................................. 7
1.4 Printer Installation ................................................................................................................... 8
Basic Settings.............................................................................................13
2.1 Accessing Web Page............................................................................................................ 13
2.2 Changing Password.............................................................................................................. 15
2.3 Quick Start Wizard................................................................................................................ 16
2.3.1 For WAN1/WAN2 (Ethernet) .......................................................................................... 17
2.3.2 For WAN3 (USB)............................................................................................................26
2.4 Service Activation Wizard...................................................................................................... 28
2.5 Web Console, Config Backup & Exit..................................................................................... 32
2.5.1 Web Console.................................................................................................................. 32
2.5.2 Config Backup ................................................................................................................ 33
2.5.3 Logout............................................................................................................................. 33
2.6 Online Status......................................................................................................................... 34
2.6.1 Physical Connection.......................................................................................................34
2.6.2 Virtual WAN.................................................................................................................... 36
2.7 Saving Configuration............................................................................................................. 36
2.8 Registering Vigor Router....................................................................................................... 37
Tutorials and Applications.........................................................................41
3.1 How to configure settings for IPv6 Service in Vigor2912...................................................... 41
3.2 How can I get the files from USB storage device connecting to Vigor router?..................... 51
3.3 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec Tunnel
(Main Mode)................................................................................................................................ 54
3.4 How to Optimize the Bandwidth through QoS Technology................................................... 58
3.5 QoS Setting Example............................................................................................................ 62
3.6 How to use Landing Page Feature ....................................................................................... 66
3.7 How to Create an Account for MyVigor................................................................................. 70
Page 8
Vigor2912 Series User’s Guide
viii
3.7.1 Create an Account via Vigor Router............................................................................... 70
3.7.2 Create an Account via MyVigor Web Site ...................................................................... 74
3.8 How to Configure Certain Computers Accessing to Internet................................................ 78
3.9 How to Block Facebook Service Accessed by the Users via Web Content Filter / URL
Content Filter............................................................................................................................... 82
Advanced Configuration............................................................................89
4.1 WAN...................................................................................................................................... 89
4.1.1 Basics of Internet Protocol (IP) Network......................................................................... 89
4.1.2 General Setup................................................................................................................. 91
4.1.3 Internet Access...............................................................................................................95
4.1.4 Multi-VLAN.................................................................................................................... 117
4.1.5 Load-Balance Policy..................................................................................................... 121
4.2 LAN ..................................................................................................................................... 123
4.2.1 Basics of LAN ............................................................................................................... 123
4.2.2 General Setup............................................................................................................... 126
4.2.3 Static Route.................................................................................................................. 132
4.2.4 VLAN............................................................................................................................. 137
4.2.5 Bind IP to MAC............................................................................................................. 140
4.2.6 LAN Port Mirror............................................................................................................. 142
4.2.7 Web Portal Setup.......................................................................................................... 143
4.3 NA T..................................................................................................................................... 144
4.3.1 Port Redirection............................................................................................................ 145
4.3.2 DMZ Host...................................................................................................................... 149
4.3.3 Open Ports.................................................................................................................... 152
4.3.4 Address Mapping.......................................................................................................... 154
4.3.5 Port Triggering.............................................................................................................. 156
4.4 Firewall................................................................................................................................ 159
4.4.1 Basics for Firewall......................................................................................................... 159
4.4.2 General Setup............................................................................................................... 161
4.4.3 Filter Setup ................................................................................................................... 166
4.4.4 DoS Defense ................................................................................................................ 174
4.5 User Management............................................................................................................... 178
4.5.1 General Setup............................................................................................................... 179
4.5.2 User Profile...................................................................................................................180
4.5.3 User Group................................................................................................................... 185
4.5.4 User Online Status........................................................................................................ 186
4.6 Objects Settings.................................................................................................................. 187
4.6.1 IP Object.......................................................................................................................187
4.6.2 IP Group ....................................................................................................................... 190
4.6.3 IPv6 Object................................................................................................................... 191
4.6.4 IPv6 Group.................................................................................................................... 193
4.6.5 Service Type Object ..................................................................................................... 194
4.6.6 Service Type Group...................................................................................................... 196
4.6.7 Keyword Object ............................................................................................................ 197
4.6.8 Keyword Group............................................................................................................. 199
4.6.9 File Extension Object.................................................................................................... 200
4.6.10 SMS/Mail Service Object............................................................................................ 202
4.6.11 Notification Object....................................................................................................... 207
Page 9
Vigor2912 Series User’s Guide
ix
4.7 CSM Profile.........................................................................................................................209
4.7.1 APP Enforcement Profile.............................................................................................. 210
4.7.2 URL Content Filter Profile............................................................................................. 212
4.7.3 Web Content Filter Profile............................................................................................. 217
4.8 Bandwidth Management ..................................................................................................... 221
4.8.1 Sessions Limit............................................................................................................... 221
4.8.2 Bandwidth Limit ............................................................................................................ 223
4.8.3 Quality of Service.......................................................................................................... 225
4.9 Applications.........................................................................................................................234
4.9.1 Dynamic DNS............................................................................................................... 234
4.9.2 Schedule....................................................................................................................... 238
4.9.3 RADIUS........................................................................................................................ 241
4.9.4 Active Directory/ LDAP................................................................................................. 241
4.9.5 UPnP............................................................................................................................. 244
4.9.6 IGMP............................................................................................................................. 246
4.9.7 Wake on LAN................................................................................................................ 247
4.9.8 SMS / Mail Alert Service............................................................................................... 248
4.10 VPN and Remote Access.................................................................................................. 250
4.10.1 VPN Client Wizard...................................................................................................... 250
4.10.2 VPN Server Wizard..................................................................................................... 257
4.10.3 Remote Access Control.............................................................................................. 262
4.10.4 PPP General Setup .................................................................................................... 262
4.10.5 IPsec General Setup................................................................................................... 264
4.10.6 IPsec Peer Identity...................................................................................................... 266
4.10.7 Remote Dial-in User ................................................................................................... 268
4.10.8 LAN to LAN................................................................................................................. 271
4.10.9 VPN TRUNK Management......................................................................................... 282
4.10.10 Connection Management ......................................................................................... 287
4.11 Certificate Management.................................................................................................... 288
4.11.1 Local Certificate.......................................................................................................... 289
4.11.2 Trusted CA Certificate ................................................................................................ 292
4.11.3 Certificate Backup....................................................................................................... 293
4.12 Wireless LAN .................................................................................................................... 294
4.12.1 Basic Concepts........................................................................................................... 294
4.12.2 General Setup............................................................................................................. 296
4.12.3 Security....................................................................................................................... 298
4.12.4 Access Control............................................................................................................ 300
4.12.5 WPS............................................................................................................................ 301
4.12.6 WDS............................................................................................................................ 304
4.12.7 Advanced Setting........................................................................................................ 307
4.12.8 WMM Configuration.................................................................................................... 309
4.12.9 AP Discovery.............................................................................................................. 311
4.12.10 Station List................................................................................................................ 312
4.13 USB Application................................................................................................................ 313
4.13.1 USB General Settings................................................................................................. 313
4.13.2 USB User Management.............................................................................................. 314
4.13.3 File Explorer................................................................................................................ 317
4.13.4 USB Device Status..................................................................................................... 318
4.13.5 Modem Support List.................................................................................................... 319
4.14 System Maintenance......................................................................................................... 320
4.14.1 System Status............................................................................................................. 320
4.14.2 TR-069........................................................................................................................ 322
Page 10
Vigor2912 Series User’s Guide
x
4.14.3 Administrator Password.............................................................................................. 323
4.14.4 User Password ........................................................................................................... 324
4.14.5 Login Page Greeting................................................................................................... 327
4.14.6 Configuration Backup ................................................................................................. 329
4.14.7 Syslog/Mail Alert......................................................................................................... 331
4.14.8 Time and Date............................................................................................................ 334
4.14.9 SNMP.......................................................................................................................... 335
4.14.10 Management............................................................................................................. 337
4.14.11 Reboot System......................................................................................................... 339
4.14.12 Firmware Upgrade.................................................................................................... 340
4.14.13 Activation.................................................................................................................. 341
4.15 Diagnostics........................................................................................................................ 343
4.15.1 Dial-out Triggering...................................................................................................... 343
4.15.2 Routing Table ............................................................................................................. 344
4.15.3 ARP Cache Table....................................................................................................... 345
4.15.4 IPv6 Neighbour Table................................................................................................. 345
4.15.5 DHCP Table................................................................................................................ 346
4.15.6 NAT Sessions Table................................................................................................... 347
4.15.7 Ping Diagnosis............................................................................................................ 348
4.15.8 Data Flow Monitor....................................................................................................... 349
4.15.9 Traffic Graph............................................................................................................... 351
4.15.10 Trace Route.............................................................................................................. 352
4.15.11 Web Firewall Syslog................................................................................................. 353
4.15.12 IPv6 TSPC Status..................................................................................................... 354
4.16 External Devices............................................................................................................... 355
Trouble Shooting ......................................................................................357
5.1 Checking If the Hardware Status Is OK or Not....................................................................357
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................. 358
5.3 Pinging the Router from Y our Computer............................................................................. 360
5.4 Checking If the ISP Settings are OK or Not........................................................................ 361
5.5 Problems for 3G Network Connection ................................................................................ 361
5.6 Backing to Factory Default Setting If Necessary ................................................................ 362
5.7 Contacting Your Dealer....................................................................................................... 363
Page 11
Vigor2912 Series User’s Guide
1
IInnttrroodduuccttiioonn
Vigor2912 series is a broadband router which integrates IP layer QoS, NAT
session/bandwidth management to help users control works well with large bandwidth.
By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the
router increases the performance of VPN greatly, and offers several protocols (such as
IPsec/PPTP/L2TP) with up to 16 VPN tunnels.
The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set
firewall policy with ease. CSM (Content Security Management) provides users control and
management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before.
By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security
outside and control inside. Object-based firewall is flexible and allows your network be safe.
In addition, Vigor2912 series supports USB interface for connecting USB printer to share
printing function or 3G USB modem for network connection.
Vigor2912 series provides two-level management to simplify the configuration of network
connection. The user mode allows user accessing into WEB interface via simple configuration.
However, if users want to have advanced configurations, they can access into WEB interface
through admin mode.
Page 12
Vigor2912 Series User’s Guide
2
11..11 WWeebb CCoonnffiigguurraattiioonn BBuuttttoonnss EExxppllaannaattiioonn
Several main buttons appeared on the web pages are defined as the following:
Save and apply current settings.
Cancel current settings and recover to the previous saved settings.
Clear all the selections and parameters settings, including selection from
drop-down list. All the values must be reset with factory default settings.
Add new settings for specified item.
Edit the settings for the selected item.
Delete the selected item with the corresponding settings.
Note: For the other buttons shown on the web pages, please refer to Chapter 3, 4 for detailed
explanation.
Page 13
Vigor2912 Series User’s Guide
3
11..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss
Before you use the Vigor router, please get acquainted with the LED indicators and connectors
first.
11..22..11 FFoorr VViiggoorr22991122
LED Status Explanation
Blinking The router is powered on and running normally. ACT (Activity)
Off The router is powered off.
On The Web Content Filter is active. (It is enabled from
Firewall >> General Setup).
WCF
Off The Web Content Filter is inactive.
QoS
On The QoS function is active.
On The DoS/DDoS function is active. DoS
Blinking It will blink while detecting an attack.
On The port is connected.
Off The port is disconnected.
LAN (P4~P1)
Blinking The data is transmitting.
On Internet connection is ready.
Off Internet connection is not ready.
WAN(W2~W1)
Blinking The data is transmitting.
VPN On The VPN tunnel is active.
On USB device is connected and ready for use. USB1~USB2
Blinking The data is transmitting.
Page 14
Vigor2912 Series User’s Guide
4
Interface
Description
PWR
Connecter for a power adapter.
ON/OFF
Power Switch.
USB Connecter for a USB device (for 3G USB Modem or printer).
W1~W2/P1 Connecter an ADSL or cable modem for accessing Internet (WAN).
W2/P1~P4 Connecters for local network devices (LAN).
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you
see the ACT LED begins to blink rapidly than usual, release the button.
Then the router will restart with the factory default configuration.
Page 15
Vigor2912 Series User’s Guide
5
11..22..22 FFoorr VViiggoorr22991122nn
LED Status Explanation
Blinking The router is powered on and running normally. ACT (Activity)
Off The router is powered off.
On The Web Content Filter is active. (It is enabled from
Firewall >> General Setup).
WCF
Off The Web Content Filter is inactive.
QoS
On The QoS function is active.
On
Wireless access point is ready.
WLAN
Blinking
It will blink slowly while wireless traffic goes through.
ACT and WLAN LEDs blink quickly and
simultaneously when WPS is working, and will return
to normal condition after two minutes. (You need to
setup WPS within 2 minutes.)
On The port is connected.
Off The port is disconnected.
LAN (P4~P1)
Blinking The data is transmitting.
On Internet connection is ready.
Off Internet connection is not ready.
WAN(W2~W1)
Blinking The data is transmitting.
VPN On The VPN tunnel is active.
On USB device is connected and ready for use. USB
Blinking The data is transmitting.
Page 16
Vigor2912 Series User’s Guide
6
Interface Description
PWR
Connecter for a power adapter.
ON/OFF Power Switch.
USB Connecter for a USB device (for 3G USB Modem or printer).
W1~W2/P1 Connecter for local network devices or modem for accessing Internet
(WAN).
W2/P1~P4 Connecters for local network devices (LAN).
Wireless LAN
ON/OFF/WPS
Press "Wireless LAN ON/OFF/WPS" button once to wait for client
device making network connection through WPS.
Press "Wireless LAN ON/OFF/WPS" button twice to enable (WLAN
LED on) or disable (WLAN LED off) wireless connection.
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you
see the ACT LED begins to blink rapidly than usual, release the button.
Then the router will restart with the factory default configuration.
Page 17
Vigor2912 Series User’s Guide
7
11..33 HHaarrddwwaarree IInnssttaallllaattiioonn
Before starting to configure the router, you have to connect your devices correctly.
1. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router
with Ethernet cable (RJ-45).
2. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router and
the other end of the cable (RJ-45) into the Ethernet port on your computer.
3. Connect one end of the power adapter to the router’s power port on the rear panel, and
the other side into a wall outlet.
4. Power on the device by pressing down the power switch on the rear panel.
5. The system starts to initiate. After completing the system test, the ACT LED will light
up and start blinking.
(For the hardware connection, we take “n” model as an example.)
Page 18
Vigor2912 Series User’s Guide
8
11..44 PPrriinntteerr IInnssttaallllaattiioonn
You can install a printer onto the router for sharing printing. All the PCs connected this router
can print documents via the router. The example provided here is made based on Windows
XP/2000. For Windows 98/SE/Vista, please visit www.DrayTek.com.
Before using it, please follow the steps below to configure settings for connected computers
(or wireless clients).
1. Connect the printer with the router through USB/parallel port.
2. Open Start->Settings-> Printer and Faxes.
Page 19
Vigor2912 Series User’s Guide
9
3. Open File->Add Printer. A welcome dialog will appear. Please click Next.
4. Click Local printer attached to this computer and click Next.
5. In this dialog, choose Create a new port Type of port and use the drop down list to
select Standard TCP/IP Port. Click Next.
Page 20
Vigor2912 Series User’s Guide
10
6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name
or IP Address and type IP_192.168.1.1 as the port name. Then, click Next.
7. Click Standard and choose Generic Network Card.
8. Then, in the following dialog, click Finish.
Page 21
Vigor2912 Series User’s Guide
11
9. Now, your system will ask you to choose right name of the printer that you installed onto
the router. Such step can make correct driver loaded onto your PC. When you finish the
selection, click Next.
10. For the final stage, you need to go back to Control Panel-> Printers and edit the
property of the new printer you have added.
11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next
please refer to the red rectangle for choosing the correct protocol and LPR name.
Page 22
Vigor2912 Series User’s Guide
12
The printer can be used for printing now. Most of the printers with different manufacturers are
compatible with vigor router.
Note 1: Some printers with the fax/scanning or other additional functions are not supported.
If you do not know whether your printer is supported or not, please visit www.draytek.com
to find out the printer list. Open Support >FAQ/Application Notes; find out the link of
USB>>Printer Server and click it.
Then, click the What types of printers are compatible with Vigor router? link.
Note 2: Vigor router supports printing request from computers via LAN ports but not WAN
port.
Page 23
Vigor2912 Series User’s Guide
13
B
Baassiicc SSeettttiinnggss
For using the router properly, it is necessary for you to change the password of web
configuration for security and adjust primary basic settings.
This chapter explains how to setup a password for accessing into the web user interface of
Vigor router and how to adjust settings for accessing Internet successfully.
22..11 AAcccceessssiinngg WWeebb PPaaggee
1. Make sure your PC connects to the router correctly.
You may either simply set up your computer to get IP dynamically from the router or set
up the IP address of the computer to be the same subnet as the default IP address of
Vigor router 192.168.1.1. For the detailed information, please refer to the later section Trouble Shooting of the guide.
2. Open a web browser on your PC and type http://192.168.1.1. The following window
will be open to ask for username and password.
3. Please type “admin/admin” as the Username/Password and click Login.
Notice: If you fail to access to the web configuration, please go to “Trouble
Shooting” for detecting and solving your problem.
Page 24
Vigor2912 Series User’s Guide
14
4. Now, the Main Screen will appear.
Note: The home page will be different slightly in accordance with the type of the
router you have.
5. The web page can be logged out according to the chosen condition. The default setting is
Auto Logout, which means the web configuration system will logout after 5 minutes
without any operation. Change the setting for your necessity.
Page 25
Vigor2912 Series User’s Guide
15
22..22 CChhaannggiinngg PPaasssswwoorrdd
Please change the password for the original security of the router.
1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will
open to ask for username and password.
2. Please type “admin/admin” as Username/Password for accessing into the web user
interface with admin mode.
3. Go to System Maintenance page and choose Administrator Password/.
4. Enter the login password (the default is “admin”) on the field of Old Password. Type
New Password. Then click OK to continue.
Note: The maximum length of the password you can set is 23 characters.
5. Now, the password has been changed. Next time, use the new password to access the
Web user interface for this router.
Note: Even the password has been changed, the Username for logging to the web
user interface is still “admin”.
Page 26
Vigor2912 Series User’s Guide
16
22..33 QQuuiicckk SSttaarrtt WWiizzaarrdd
If your router can be under an environment with high speed NAT, the configuration provide
here can help you to deploy and use the router quickly. The first screen of Quick Start
Wizard is entering login password. After typing the password, please click Next.
On the next page as shown below, please select the WAN interface that you use. If Ethernet
interface is used, please choose WAN1/WAN2; if 3G USB modem is used, please choose
WAN3. Then click Next for next step.
WAN1, WAN2 and WAN3 will bring up different configuration page. Refer to the following
for detailed information.
Page 27
Vigor2912 Series User’s Guide
17
22..33..11 FFoorr WWAANN11//WWAANN22 ((EEtthheerrnneett))
WAN1/WAN2 is dedicated to physical mode in Ethernet. If you choose WAN1/WAN2,
please specify physical type. Then, click Next.
On the next page as shown below, please select the appropriate Internet access type according
to the information from your ISP. For example, you should select PPPoE mode if the ISP
provides you PPPoE interface. Then click Next for next step.
PPPPPPooEE
1. Choose WAN2 as the WAN Interface and click the Next button. The following page will
be open for you to specify Internet Access Type.
Page 28
Vigor2912 Series User’s Guide
18
2. Click PPPoE as the Internet Access Type. Then click Next to continue.
Available settings are explained as follows:
Item Description
User Name
Assign a specific valid user name provided by the ISP.
Note: The maximum length of the user name you can set is
63 characters.
Password
Assign a valid password provided by the ISP.
Note: The maximum length of the password you can set is 62
characters.
Confirm Password
Retype the password.
Back
Click it to return to previous setting page.
Next
Click it to get into the next setting page.
Cancel
Click it to give up the quick start wizard.
Page 29
Vigor2912 Series User’s Guide
19
3. Please manually enter the Username/Password provided by your ISP. Click Next for
viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 30
Vigor2912 Series User’s Guide
20
PPPPTTPP//LL22TTPP
1. Choose WAN2 as the WAN Interface and click the Next button. The following page will
be open for you to specify Internet Access Type.
2. Click PPTP/L2TP as the Internet Access Type. Then click Next to continue.
Available settings are explained as follows:
Item Description
User Name
Assign a specific valid user name provided by the ISP.
Note: The maximum length of the user name you can set is
63 characters.
Password
Assign a valid password provided by the ISP.
Page 31
Vigor2912 Series User’s Guide
21
Note: The maximum length of the password you can set is
62 characters.
Confirm Password
Retype the password.
WAN IP
Configuration
Obtain an IP address automatically – the router will get
an IP address automatically from DHCP server.
Specify an IP address – you have to type relational
settings manually.
IP Address - Type the IP address.
Subnet Mask –Type the subnet mask.
Gateway – Type the IP address of the gateway.
Primary DNS –Type in the primary IP address for the
router.
Second DNS –Type in secondary IP address for necessity
in the future.
PPTP Server / L2TP
Server
Type the IP address of the server.
Back
Click it to return to previous setting page.
Next
Click it to get into the next setting page.
Cancel
Click it to give up the quick start wizard.
3. Please type in the IP address/mask/gateway information originally provided by your ISP.
Then click Next for viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 32
Vigor2912 Series User’s Guide
22
SSttaattiicc IIPP
1. Choose WAN2 as the WAN Interface and click the Next button. The following page will
be open for you to specify Internet Access Type.
2. Click Static IP as the Internet Access type. Simply click Next to continue.
Available settings are explained as follows:
Item Description
WAN IP
Type the IP address.
Subnet Mask
Type the subnet mask.
Gateway
Type the IP address of gateway.
Primary DNS
Type in the primary IP address for the router.
Secondary DNS
Type in secondary IP address for necessity in the future.
Back
Click it to return to previous setting page.
Next
Click it to get into the next setting page.
Page 33
Vigor2912 Series User’s Guide
23
Cancel
Click it to give up the quick start wizard.
3. Please type in the IP address information originally provided by your ISP. Then click
Next for next step.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 34
Vigor2912 Series User’s Guide
24
DDHHCCPP
1. Choose WAN2 as WAN Interface and click the Next button. The following page will be
open for you to specify Internet Access Type.
2. Click DHCP as the Internet Access type. Simply click Next to continue.
Available settings are explained as follows:
Item Description
Host Name
Type the name of the host.
Note: The maximum length of the host name you can set is
39 characters.
MAC
Some Cable service providers specify a specific MAC
address for access authentication. In such cases you need to
enter the MAC address.
Back
Click it to return to previous setting page.
Next
Click it to get into the next setting page.
Page 35
Vigor2912 Series User’s Guide
25
Cancel
Click it to give up the quick start wizard.
3. After finished the settings above, click Next for viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 36
Vigor2912 Series User’s Guide
26
22..33..22 FFoorr WWAANN33 ((UUSSBB))
WAN3 is dedicated to physical mode in USB. If WAN3 is selected, it is not necessary for you
to type any information for such connection.
1. Choose WAN3 as WAN Interface.
2. Then, click Next for getting the following page.
Available settings are explained as follows:
Item Description
Internet Access
Choose a protocol for accessing the Internet.
3G/4G USB Modem
(PPP mode)
SIM Pin code –Type PIN code of the SIM card that will be
used to access Internet. The maximum length of the pin
code you can set is 15 characters.
Modem Initial String – Such value is used to initialize
USB modem. Please use the default value. If you have any
question, please contact to your ISP. The maximum length
of the string you can set is 47 characters.
Page 37
Vigor2912 Series User’s Guide
27
APN Name – APN means Access Point Name which is
provided and required by some ISPs. Type the name and
click Apply.
3. Then, click Next for viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 38
Vigor2912 Series User’s Guide
28
22..44 SSeerrvviiccee AAccttiivvaattiioonn WWiizzaarrdd
Service Activation Wizard can guide you to activate WCF service (Web Content Filter) with a
quick and easy way. For the Service Activation Wizard is only available for admin
operation, therefore, please type “admin/admin” on Username/Password while Logging
into the web user interface.
Service Activation Wizard is a tool which allows you to use trial version or update the license
of WCF directly without accessing into the server (MyVigor) located on
http://myvigor.draytek.com
. For using Web Content Filter Profile, please refer to later section
Web Content Filter Profile for detailed information.
Now, follow the steps listed below to activate WCF feature for your router.
Note: Such function is available only for Admin Mode.
1. Open Service Activation Wizard.
2. The screen of Service Activation Wizard will be shown as follows. Choose the one you
need and click Next. In this case, we choose to activate free trail edition.
Free trial edition: it offers a period of trial for you to get acquainted with WCF function.
Formal edition with license key: you can extend the license valid time manually.
Note: If you activate Formal edition with license key first, the free trial edition will
be invalid.
Page 39
Vigor2912 Series User’s Guide
29
3. In the following page, you can activate the Web content filter services at the same time
or individually. When you finish the selection, please click Next.
Commtouch is the web content filter based on Commtouch operated in the worldwide.
There is a 30-day trial period. After trial, you can purchase DrayTek's prepared
Commtouch GlobalView WCF package from retailing outlets.
4. Setting confirmation page will be displayed as follows, please click Next.
Page 40
Vigor2912 Series User’s Guide
30
5. Wait for a moment till the following page appears.
When such page appears, you can enable or disable these services for your necessity.
Then, click Finish.
Note: The service will be activated and applied as the default rule configured in
Firewall>>General Setup.
6. Now, the web page will display the service that you have activated according to your
selection(s). The valid time for the free trial of these services is one month.
Later, if you need to extend the license valid time for the same service, you can also use the
Service Activation Wizard again to reach your goal by clicking the radio button of Formal
edition with license key and clicking Next.
Page 41
Vigor2912 Series User’s Guide
31
Page 42
Vigor2912 Series User’s Guide
32
22..55 WWeebb CCoonnssoollee,, CCoonnffiigg BBaacckkuupp && EExxiitt
22..55..11 WWeebb CCoonnssoollee
It is not necessary to use the telnet command via DOS prompt. The changes made by using
web console have the same effects as modified through web user interface. The
functions/settings modified under Web Console also can be reviewed on the web user
interface.
Click the Web Console icon on the top of the main screen to open the following screen.
Page 43
Vigor2912 Series User’s Guide
33
22..55..22 CCoonnffiigg BBaacckkuupp
There is one way to store current used settings quickly by clicking the Config Backup icon. It
allows you to backup current settings as a file. Such configuration file can be restored by using
System Maintenance>>Configuration Backup.
Simply click the icon on the top of the main screen and a pop up dialog will appear.
Click Save to store the setting.
22..55..33 LLooggoouutt
Click the Logout icon to exit the web user interface.
Page 44
Vigor2912 Series User’s Guide
34
22..66 OOnnlliinnee SSttaattuuss
22..66..11 PPhhyyssiiccaall CCoonnnneeccttiioonn
Such page displays the physical connection status such as LAN connection status, WAN
connection status, ADSL information, and so on.
PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv44 PPrroottooccooll
PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv66 PPrroottooccooll
Page 45
Vigor2912 Series User’s Guide
35
Detailed explanation (for IPv4) is shown below:
Item Description
LAN Status
Primary DNS-Displays the primary DNS server address
for WAN interface.
Secondary DNS -Displays the secondary DNS server
address for WAN interface.
IP Address-Displays the IP address of the LAN interface.
TX Packets-Displays the total transmitted packets at the
LAN interface.
RX Packets-Displays the total received packets at the LAN
interface.
WAN1/WAN2/WAN3
Status
Enable – Yes in red means such interface is available but
not enabled. Yes in green means such interface is enabled.
Line – Displays the physical connection (VDSL, ADSL,
Ethernet, or USB) of this interface.
Name – Display the name of the router.
Mode - Displays the type of WAN connection (e.g.,
PPPoE).
Up Time - Displays the total uptime of the interface.
IP - Displays the IP address of the WAN interface.
GW IP - Displays the IP address of the default gateway.
TX Packets - Displays the total transmitted packets at the
WAN interface.
TX Rate - Displays the speed of transmitted octets at the
WAN interface.
RX Packets - Displays the total number of received packets
at the WAN interface.
RX Rate - Displays the speed of received octets at the
WAN interface.
Detailed explanation (for IPv6) is shown below:
Item Description
LAN Status
IP Address- Displays the IPv6 address of the LAN
interface..
TX Packets-Displays the total transmitted packets at the
LAN interface.
RX Packets-Displays the total received packets at the LAN
interface.
TX Bytes - Displays the speed of transmitted octets at the
LAN interface.
RX Bytes - Displays the speed of received octets at the
LAN interface.
WAN IPv6 Status
Enable – No in red means such interface is available but
not enabled. Yes in green means such interface is enabled.
No in red means such interface is not available.
Page 46
Vigor2912 Series User’s Guide
36
Item Description
Mode - Displays the type of WAN connection (e.g., TSPC).
Up Time - Displays the total uptime of the interface.
IP - Displays the IP address of the WAN interface.
Gateway IP - Displays the IP address of the default
gateway.
Note: The words in green mean that the WAN connection of that interface is ready for
accessing Internet; the words in red mean that the WAN connection of that interface is not
ready for accessing Internet.
22..66..22 VViirrttuuaall WWAANN
Such page displays the virtual WAN connection information.
Virtual WAN are used by TR-069 management, VoIP service and so on.
The field of Application will list the purpose of such WAN connection.
22..77 SSaavviinngg CCoonnffiigguurraattiioonn
Each time you click OK on the web page for saving the configuration, you can find messages
showing the system interaction with you.
Ready indicates the system is ready for you to input settings.
Settings Saved means your settings are saved once you click Finish or OK button.
Page 47
Vigor2912 Series User’s Guide
37
22..88 RReeggiisstteerriinngg VViiggoorr RRoouutteerr
You have finished the configuration of Quick Start Wizard and you can surf the Internet at any
time. Now it is the time to register your Vigor router to MyVigor website for getting more
service. Please follow the steps below to finish the router registration.
1 Please login the web configuration interface of Vigor router by typing “admin/admin”
as User Name / Password.
2 Click Support Area>>Production Registration from the home page.
3 A Login page will be shown on the screen. Please type the account and password that
you created previously. And click Login.
Page 48
Vigor2912 Series User’s Guide
38
4 The following page will be displayed after you logging in MyVigor. From this page,
please click Add or Product Registration.
5 When the following page appears, please type in Nickname (for the router) and choose
the right registration date from the popup calendar (it appears when you click on the box
of Registration Date). After adding the basic information for the router, please click
Submit.
Page 49
Vigor2912 Series User’s Guide
39
6 When the following page appears, your router information has been added to the
database.
7 Now, you have finished the product registration.
8 After clicking OK, you will see the following page. Your router has been registered to
myvigor website successfully.
If you have not activated web content filter service by using Service Activation Wizard,
you can activate the service from this step. Please click the serial number link.
9 From the Device’s Service section, click the Trial.
Page 50
Vigor2912 Series User’s Guide
40
10 In the following page, check the box of “I have read and accept the above Agreement”.
The system will find out the date for you to activate this version of service. Then, click
Next.
11 When this page appears, click Register.
12 Wait for a moment until the following page appears.
13 Click Close.
Page 51
Vigor2912 Series User’s Guide
41
TTuuttoorriiaallss aanndd A
Apppplliiccaattiioonnss
33..11 HHooww ttoo ccoonnffiigguurree sseettttiinnggss ffoorr IIPPvv66 SSeerrvviiccee iinn V
Viiggoorr22991122
Due to the shortage of IPv4 address, more and more countries use IPv6 to solve the problem.
However, to continually use the original rich resources of IPv4, both IPv6 and IPv4 networks
shall communicate for each other via intercommunication mechanism to complete the shifting
job from IPv4 to IPv6 gradually. At present, there are three common types of
intercommunication mechanisms:
z Dual Stack
The user can use both IPv4 and IPv6 techniques at the same time. That means adding an
IPv6 stack on the origin network layer to let the host own the communication capability
of IPv4 and IPv6.
z Tunnel
Both IPv6 hosts can communication for each other via existing IPv4 network
environment. The IPv6 packets will be encapsulated with the header of IPv4 first. Later,
the packets will be transformed and judged by IPv4 router. Once the packets arrive the
border between IPv4 and IPv6, the header of IPv4 on the packets will be removed. Then,
the packets with IPv6 address will be forwarded to the destination of IPv6 network.
z Translation
Such feature is active only for the user who uses IPv4 to communicate with other user
using IPv4 service.
Before configuring the settings on Vigor2912, you need to know which connection type that
your IPv6 service used.
Note: For the IPv6 service, you have to configure WAN/LAN settings before using the
service.
II.. CCoonnffiigguurriinngg tthhee WWAANN SSeettttiinnggss
For the IPv6 WAN settings for Vigor2912, there are five connection types to be chosen: PPP,
TSPC, AICCU, DHCPv6 Client and Static IPv6.
1. Access into the web user interface of Viogr2925. Open WAN>> Internet Access.
Choose one of the WAN interfaces as the one supporting IPv6 service. Then, click the
IPv6 button of the selected WAN.
Page 52
Vigor2912 Series User’s Guide
42
Note: Only one WAN interface support IPv6 service at one time. In this example,
WAN2 is chosen as the one supporting IPv6 service.
2. In the following figure, use the drop down list to choose a proper connection type.
Different connection types will bring out different configuration page. Refer to the
following:
z PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same
time
Choose PPP and type the information for PPPoE of IPv4.
Access into the setting page for IPv6 service, it is not necessary for you to configure
anything.
Page 53
Vigor2912 Series User’s Guide
43
Click OK and open Online Status. If the connection is successful, you will get the IP
address for IPv4 and IPv6 at the same time.
Page 54
Vigor2912 Series User’s Guide
44
z TSPC – Tunnel application, both IPv6 hosts communicate through IPv4 network
Choose TSPC and type the information for TSPC service.
Note: While using such mode, you have to make sure the IPv4 network connection is
normal.
(In the following figure, the TSPC information is obtained from http://gogo6.com/ after
applied for the service.)
Click OK and open Online Status. If the connection is successful, the physical
connection will be shows as follows:
Page 55
Vigor2912 Series User’s Guide
45
z AICCU – Tunnel application
Choose AICCU and type the information for AICCU of IPv6.
Note: While using such mode, you have to make sure the IPv4 network connection is
normal.
(In the following figure, the AICCU information is obtained from
https://www.sixxs.net/main/
after applied for the service.)
Click OK and open Online Status. If the connection is successful, the physical
connection will be shows as follows:
Page 56
Vigor2912 Series User’s Guide
46
z DHCPv6 Client
Choose DHCPv6 Client. Click one of the identity associations and type the IAID
number.
Click OK and open Online Status. If the connection is successful, the physical
connection will be shows as follows:
Page 57
Vigor2912 Series User’s Guide
47
z Static IPv6
Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address.
Click OK and open Online Status. If the connection is successful, the physical
connection will be shows as follows:
Page 58
Vigor2912 Series User’s Guide
48
IIII.. CCoonnffiigguurriinngg tthhee LLAANN SSeettttiinnggss
After finished the WAN settings for IPv6, please configure the LAN settings to make the
router’s client getting the IPv6 address.
1. Access into the web user interface of Viogr2925. Open LAN>> General Setup. Click
the IPv6 button.
Note: Only the subnet of LAN1 supports IPv6 feature.
2. In the field of RADVD Configuration, the default setting is Enable. The client’s PC
will ask RADVD service for the Prefix of IPv6 address automatically, and generate an
Interface ID by itself to compose a full and unique IPv6 address.
3. In the field of HCPv6 Server Configuration, when DHCPv6 service is enabled, you can
assign available IPv6 address for the client manually.
Note: When both mechanisms are enabled, the client can determine which mechanism
to be used (e.g., the default mechanism for Windows7 is RADVD).
Page 59
Vigor2912 Series User’s Guide
49
IIIIII.. CCoonnffiirrmmiinngg IIPPvv66 SSeerrvviiccee RRuunn SSuucccceessssffuullllyy
1. Make sure you have get the correct IPv6 IP address. Get into MS-DOS interface and type
the command of “ipconfig”. Refer to the following figure.
From the above figure we can see IPv6 IP address has been captured by the system.
2. Use the Ping command to ping any IPv6 address indicating an IPv6 website. For
example, www.kame.net
is a website supporting IPv4 IP and IPv6 IP services. Its IPv6
address is seen with a format of 2001:200:dff:fff1:216:3eff:feb1:44d7.
After getting the above message, it means the IPv6 service has been activated
successfully.
Page 60
Vigor2912 Series User’s Guide
50
3. Connect to the website for IPv6. Open a web browser and type an URL of IPv6, e.g.,
www.kame.net
. If your computer accesses into the website by using IPv6 address, you
may see a turtle dancing on the screen. If not, only a steady turtle will be seen.
If you can see a turtle dancing on the screen, that means IPv6 service is ready for you to
access and utilize.
Page 61
Vigor2912 Series User’s Guide
51
33..22 HHooww ccaann II ggeett tthhee ffiilleess ffrroomm UUSSBB ssttoorraaggee ddeevviicce
e ccoonnnneeccttiinngg
ttoo VViiggoorr rroouutteerr??
Files on USB storage device can be reviewed by opening USB Applicaiton>>File Explorer.
If it is necessary for you to delete, copy files on the device or write, paste files to the devcie, it
must be done through SAMBA server or FTP server.
Samba service is based on the original USB FTP service. You will need to setup USB FTP
first. We would like to give brief instructions on USB FTP setup here.
1. Plug the USB device to the USB port on the router. Make sure Disk Connected appears
on the Connection Status as the figure shown below:
2. Then, please open USB Application >> USB General Settings to enable Samba service.
Page 62
Vigor2912 Series User’s Guide
52
3. Setup a user account for the FTP service by using USB Application >>USB User
Management. Click Enable to enable FTP/Samba User account. Here we add a new
account "user1" and assign authorities “Read”, “Write” and “List” to it.
4. Click OK to save the configuration.
5. Make sure the FTP service is running properly. Please open a browser and type
ftp://192.168.1.1
. Use the account "user1" to login.
Page 63
Vigor2912 Series User’s Guide
53
6. When the following screen appears, it means the FTP service is running properly.
7. Return to USB Application >> USB Disk Status. The information for FTP server will
be shown as below.
Now, users in LAN of Vigor2912 can access into the USB storage device by typing
ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the
Access Rule for FTP account settings in USB Application >>USB User Management.
Page 64
Vigor2912 Series User’s Guide
54
33..33 HHooww ttoo BBuuiilldd aa LLAANN--ttoo--LLAANN VVPPNN BBeettwweeeenn RReemmoottee OOf
fffiiccee aanndd
HHeeaaddqquuaarrtteerr vviiaa IIPPsseecc TTuunnnneell ((MMaaiinn MMooddee))
CCoonnffiigguurraattiioonn oonn VViiggoorr RRoouutteerr ffoorr HHeeaadd OOffffiiccee
1. Log into the web user interface of Vigor router.
2. Open VPN and Remote Access>>LAN to LAN to create a LAN-to-LAN profile.
3. Click any index number to open the configuration page. Type a name which is easy for
identification for such profile (in this case, type VPN Server), and check the box of
Enable This Profile. For Vigor router will be set as a server, the call direction shall be
set as Dial-in and set 0 as Idle Timeout.
Page 65
Vigor2912 Series User’s Guide
55
4. Now navigate to the next section, Dial-In Settings to check PPTP, IPsec Tunnel and
L2TP boxes. Check the box of Specify Remote… and type the Peer VPN Server IP
(e.g., 218.242.130.19 in this case). Press the IKE Pre-Shared Key button to set the PSK;
and select Medium (AH) or High (ESP) as the security method.
5. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for remote
side.
6. Click OK to save the settings.
Page 66
Vigor2912 Series User’s Guide
56
7. Open VPN and Remote Access>>Connection Management to check the dial-in
connection status (from branch office).
CCoonnffiigguurraattiioonn oonn VViiggoorr RRoouutteerr ffoorr BBrraanncchh OOffffiiccee
1. Log into the web user interface of Vigor router.
2. Open VPN and Remote Access>>LAN to LAN to create a LAN-to-LAN profile. The
following settings are for a permanent VPN connection.
3. Click any index number to open the configuration page. Type a name which is easy for
identification for such profile (in this case, type VPN Client), and check the box of
Enable This Profile. For such Vigor router will be set as a client, the call direction shall
be set as Dial-out. Check the box of Always on for a permanent VPN connection.
Page 67
Vigor2912 Series User’s Guide
57
4. Now navigate to the next section, Dial-Out Settings to select the IPsec Tunnel service
and type the remote server IP/host name (e.g., 218.242.133.91, in this case). Press the
IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP)
as the security method.
5. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for the
remote side.
6. Click OK to save the settings.
Page 68
Vigor2912 Series User’s Guide
58
7. Open VPN and Remote Access>>Connection Management to check the dial-in
connection status (from head office).
33..44 HHooww ttoo OOppttiimmiizzee tthhee BBaannddwwiiddtthh tthhrroouugghh QQooSS TTeecchhn
noollooggyy
Have you ever gotten any problems in uploading/downloading files (Voice, video or
email/data only) with the narrow/districted bandwidth you may share from the common
Internet connection line? The advanced bandwidth management technology-QoS (Quality of
Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data
transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek
Vigor router as below.
Scenario: The Internet connection you got from ISP line is 2MB/512Kb. There are VoIP
telephony network, IPTV set top box and data server at your home. Assume you want to
allocate 30% of the bandwidth you got to VoIP demand, 50% for IPTV, 15% for mail/data,
5% for others. Let's see how easily it is to do the setting as below:
1.
Open Bandwidth Management>> Quality of Service.
2. You will get the following page. Click the Edit link for Class 1.
3.
In the following page, type a name (e.g., VoIP) for such class and click Add.
Page 69
Vigor2912 Series User’s Guide
59
4. Check the box of ACT. Click Edit to specify the local address.
5. In the pop-up window, choose Range Address as the Address Type and type the start IP
address and end IP address in relational fields. Click OK to save the settings and exit the
window.
6. Click OK again to save the settings.
Page 70
Vigor2912 Series User’s Guide
60
7. The class rule for VoIP has been set. Click OK to return to previous page.
8. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as
shown below.
and
Page 71
Vigor2912 Series User’s Guide
61
9. Assuming you get 2MB/512Kb Internet line. You can click the Setup link of WAN1 to
set up the bandwidth for different groups among VoIP, IPTV and Data/Email.
10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the
boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP
Bandwidth Control.
11. Click OK to save the settings. The class rules for WAN1 are defined as shown below.
Page 72
Vigor2912 Series User’s Guide
62
33..55 QQooSS SSeettttiinngg EExxaammppllee
Assume a teleworker sometimes works at home and takes care of children. When working
time, he would use Vigor router at home to connect to the server in the headquarter office
downtown via either HTTPS or V PN to check email and access internal database. Meanwhile,
children may chat on Skype in the restroom.
1. Go to Bandwidth Management>>Quality of Service.
2. Click Setup link of WAN(1/2/3). Make sure the QoS Control on the left corner is
checked. And select BOTH in Direction.
3. Set Inbound/Outbound bandwidth.
Note: The rate of outbound/inbound must be smaller than the real bandwidth to
ensure correct calculation of QoS. It is suggested to set the bandwidth value for
inbound/outbound as 80% - 85% of physical network speed provided by ISP to
maximize the QoS performance.
Page 73
Vigor2912 Series User’s Guide
63
4. Return to previous page. Enter the Name of Index Class 1 by clicking Edit link. Type the
name “E-mail” for Class 1. Click OK to save the settings.
5. Click the Setup link for WAN2. The user can set reserved bandwidth (e.g., 25%) for
E-mail using protocol POP3 and SMTP. Click OK to save the settings.
6. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this
index, the user will set reserved bandwidth for HTTPS. And click OK.
Page 74
Vigor2912 Series User’s Guide
64
7. Click Setup link for WAN2.
8. Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic
influent other application. Click OK.
9. If the worker has connected to the headquarter using host to host VPN tunnel. (Please
refer to Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the
Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel.
Page 75
Vigor2912 Series User’s Guide
65
10. Click Edit for Class 3 to open a new window. In this index, the user will set reserved
bandwidth for VPN.
11. Click Add to open the following window. Check the ACT box, first.
12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of
Remote Address to set headquarter’s IP address. Leave other fields and click OK.
Page 76
Vigor2912 Series User’s Guide
66
33..66 HHooww ttoo uussee LLaannddiinngg PPaaggee FFeeaattuurree
Landing Page is a special feature configured under User Management. It can specify the
message, content to be seen or specify which website to be accessed into when users try to
access into the Internet by passing the authentication. Here, we take Vigor2912 series router as
an example.
EExxaammppllee 1
1
：
：
UUsseerrss ccaann sseeee tthhee mmeessssaaggee ffoorr llaannddiinngg ppaaggee aafftteerr llooggggiinngg iinnttoo
IInntteerrnneett ssuucccceessssffuullllyy
1. Open the web user interface of Vigor2912.
2. Open User Management -> General Setup to get the following page. In the field of
Landing Page, please type the words of “Login Success”. Please note that the maximum
number of characters to be typed here is 255.
3. Now you can enable the Landing Page function. Open User Management -> User
Profile and click one of the index number (e.g., index number 3) links.
Page 77
Vigor2912 Series User’s Guide
67
4. In the following page, check the box of Landing page and click OK to save the settings.
5. Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and
asks for username and password. Please type the correct username and password.
6. Click Login. If the logging is successful, you will see the message of Login Success
from the browser you use.
Page 78
Vigor2912 Series User’s Guide
68
EExxaammppllee 2
2
：
：
TThhee ssyysstteemm wwiillll ccoonnnneecctt ttoo hhttttpp::////wwwwww..ddrraayytteekk..ccoomm
aauuttoommaattiiccaallllyy aafftteerr llooggggiinngg iinnttoo IInntteerrnneett ssuucccceessssffuullllyy
1. In the field of Landing Page, please type the words as below:
“ <body stats=1><script language='javascript'>
window.location='http://www.draytek.com'</script></body>”
2. Next, enable the Landing Page function. Open User Management -> User Profile and
click one of the index number (e.g., index number 3) links.
3. In the following page, check the box of Landing page and click OK to save the settings.
Page 79
Vigor2912 Series User’s Guide
69
4. Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and
asks for username and password. Please type the correct username and password.
5. Click Login. If the logging is successful, you will be directed into the website of
www.draytek.com
.
Page 80
Vigor2912 Series User’s Guide
70
33..77 HHooww ttoo CCrreeaattee aann AAccccoouunntt ffoorr MMyyVViiggoorr
The website of MyVigor (a server located on http://myvigor.draytek.com) provides several
useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering
the web pages for the sake of protecting your system.
To access into MyVigor for getting more information, please create an account for MyVigor.
33..77..11 CCrreeaattee aann AAccccoouunntt vviiaa VViiggoorr RRoouutteerr
1. Click CSM>> Web Content Filter Profile. The following page will appear.
Or
Click System Maintenance>>Activation to open the following page.
Page 81
Vigor2912 Series User’s Guide
71
2. Click the Activate link. A login page for MyVigor web site will pop up automatically.
3. Click the link of Create an account now.
4. Check to confirm that you accept the Agreement and click Accept.
Page 82
Vigor2912 Series User’s Guide
72
5. Type your personal information in this page and then click Continue.
6. Choose proper selection for your computer and click Continue.
Page 83
Vigor2912 Series User’s Guide
73
7. Now you have created an account successfully. Click START.
8. Check to see the confirmation email with the title of
New Account Confirmation
Letter from myvigor.draytek.com.
9. Click the Activate my Account link to enable the account that you created. The following
screen will be shown to verify the register process is finished. Please click Login.
Page 84
Vigor2912 Series User’s Guide
74
10. When you see the following page, please type in the account and password (that you just
created) in the fields of UserName and Password.
11. Now, click Login. Your account has been activated. You can access into MyVigor server
to activate the service (e.g., WCF) that you want.
33..77..22 CCrreeaattee aann AAccccoouunntt vviiaa MMyyVViiggoorr WWeebb SSiittee
1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click
the link Click here! to access into next page.
Page 85
Vigor2912 Series User’s Guide
75
2. Check to confirm that you accept the Agreement and click Accept.
3. Type your personal information in this page and then click Continue.
4. Choose proper selection for your computer and click Continue.
Page 86
Vigor2912 Series User’s Guide
76
5. Now you have created an account successfully. Click START.
6. Check to see the confirmation email with the title of
New Account Confirmation
Letter from myvigor.draytek.com
.
7. Click the Activate my Account link to enable the account that you created. The following
screen will be shown to verify the register process is finished. Please click Login.
Page 87
Vigor2912 Series User’s Guide
77
8. When you see the following page, please type in the account and password (that you just
created) in the fields of UserName and Password. Then type the code in the box of Auth
Code according to the value displayed on the right side of it.
Now, click Login. Your account has been activated. You can access into MyVigor server to
activate the service (e.g., WCF) that you want.
Page 88
Vigor2912 Series User’s Guide
78
33..88 HHooww ttoo CCoonnffiigguurree CCeerrttaaiinn CCoommppuutteerrss AAcccceessssiinngg tto
o IInntteerrnneett
We can specify certain computers (e.g., 192.168.1.10 ~ 192.168.1.20) accessing to Internet
through Vigor router. Others (e.g., 192.168.1.31 and 192.168.1.32) outside the range can get
the source from LAN only.
The way we can use is to set two rules under Firewall. For Rule 1 of Set 2 under
Firewall>>Filter Setup is used as the default setting, we has to create a new rule starting
from Filter Rule 2 of Set 2.
1. Access into the web user interface of Vigor router.
2. Open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 2 button.
Page 89
Vigor2912 Series User’s Guide
79
3. Check the box of Check to enable the Filter Rule. Type the comments (e.g., block_all).
Choose Block If No Further Match for the Filter setting. Then, click OK.
Note: In default, the router will check the packets starting with Set 2, Filter Rule 2 to
Filter Rule 7. If Block If No Further Match for is selected for Filter, the firewall of
the router would check the packets with the rules starting from Rule 3 to Rule 7. The
packets not matching with the rules will be processed according to Rule 2.
4. Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and
choose the Filter Rule 3 button.
5. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip).
Click the Edit button for Source IP.
Page 90
Vigor2912 Series User’s Guide
80
6. A dialog box will be popped up. Choose Range Address as Address Type by using the
drop down list. Type 192.168.1.10 in the field of Start IP, and type 192.168.1.20 in the
field of End IP. Then, click OK to save the settings. The computers within the range can
access into the Internet.
7. Now, check the content of Source IP is correct or not. The action for Filter shall be set
with Pass Immediately. Then, click OK to save the settings.
Page 91
Vigor2912 Series User’s Guide
81
8. Both filter rules have been created. Click OK.
9. Now, all the settings are configured well. Only the computers with the IP addresses
within 192.168.1.10 ~ 192.168.1.20 can access to Internet.
Page 92
Vigor2912 Series User’s Guide
82
33..99 HHooww ttoo BBlloocckk FFaacceebbooookk SSeerrvviiccee AAcccceesssseedd bbyy tthhee U
Usseerrss vviiaa
WWeebb CCoonntteenntt FFiilltteerr // UURRLL CCoonntteenntt FFiilltteerr
There are two ways to block the facebook service, Web Content Filter and URL Content
Filter.
Web Content Filter,
Benefits: Easily and quickly implement the category/website that you want to block.
Note: License is required.
URL Content Filter,
Benefits: Free, flexible for customize webpage.
Note: Manual setting (e.g., one keyword for one website.)
II.. VViiaa WWeebb CCoonntteenntt FFiilltteerr
1. Make sure the Web Content Filter (powered by Commtouch) license is valid.
How to register/activate Web Content Filter (WCF) license? Please visit for getting more
information:
*How to Register AI/AV/AS/WCF Service (Service Activation Wizard)
(http://www.draytek.com/user/SupportFAQDetail.php?ID=1955
)
*How to Activate Anti-Virus/Anti-Intrusion/Anti-Spam Service
(http://www.draytek.com/user/SupportFAQDetail.php?ID=286
)
How to use the Web Content Filter (WCF)
(http://www.draytek.com/user/SupportFAQDetail.php?ID=1953
)
* What the Web Content Filter (WCF) license benefits are,
(http://www.draytek.com/user/PdInfoDetail.php?Id=110
)
Page 93
Vigor2912 Series User’s Guide
83
2. Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social
Networking with Action, Block.
3. Enable this profile in Firewall>>General Setup>>Default Rule.
Page 94
Vigor2912 Series User’s Guide
84
4. Next time when someone accesses facebook via this router, the web page would be
blocked and the following message would be displayed instead.
IIII.. VViiaa UURRLL CCoonntteenntt FFiilltteerr
A. Block the web page containing the word of “Facebook”
1. Open Object Settings>>Keyword Object. Click an index number to open the setting
page.
2. In the field of Contents, please type facebook. Configure the settings as the following
figure.
3. Open CSM>>URL Content Filter Profile. Click an index number to open the setting
page.
4. Configure the settings as the following figure.
Page 95
Vigor2912 Series User’s Guide
85
5. When you finished the above steps, click OK. Then, open Firewall>>General Setup.
6. Click the Default Rule tab. Choose the profile just configured from the drop down list in
the field of URL Content Filter. Now, users cannot open any web page with the word
“facebook” inside.
B. Disallow users to play games on Facebook
1. Open Object Settings>>Keyword Object. Click an index number to open the setting
page.
2. In the field of Contents, please type apps.facebook. Configure the settings as the
following figure.
Page 96
Vigor2912 Series User’s Guide
86
3. Open CSM>>URL Content Filter Profile. Click an index number to open the setting
page.
4. Configure the settings as the following figure.
5. When you finished the above steps, please open Firewall>>General Setup.
Page 97
Vigor2912 Series User’s Guide
87
6. Click the Default Rule tab. Choose the profile just configured from the drop down list in
the field of URL Content Filter. Now, users cannot open any web page with the word
“facebook” inside.
Page 98
Vigor2912 Series User’s Guide
88
This page is left blank.
Page 99
Vigor2912 Series User’s Guide
89
A
Addvvaanncceedd
C
Coonnffiigguurraattiioonn
This chapter will guide users to execute advanced (full) configuration through admin mode
operation.
1. Open a web browser on your PC and type http://192.168.1.1. The window will ask for
typing username and password.
2. Please type “admin/admin” on Username/Password for administration operation.
Now, the Main Screen will appear. Be aware that “Admin mode” will be displayed on the
bottom left side.
44..11 WWAANN
Quick Start Wizard offers user an easy method to quick setup the connection mode for the
router. Moreover, if you want to adjust more settings for different WAN modes, please go to
WAN group.
44..11..11 BBaassiiccss ooff IInntteerrnneett PPrroottooccooll ((IIPP)) NNeettwwoorrkk
IP means Internet Protocol. Every device in an IP-based Network including routers, print
server, and host PCs, needs an IP address to identify its location on the network. To avoid
address conflicts, IP addresses are publicly registered with the Network Information Centre
(NIC). Having a unique IP address is mandatory for those devices participated in the public
network but not in the private TCP/IP local area networks (LANs), such as host PCs under the
management of a router since they do not need to be accessed by the public. Hence, the NIC
has reserved certain addresses that will never be registered publicly. These are known as
private IP addresses, and are listed in the following ranges:
Page 100
Vigor2912 Series User’s Guide
90
From 10.0.0.0 to 10.255.255.255
From 172.16.0.0 to 172.31.255.255
From 192.168.0.0 to 192.168.255.255
WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss
As the router plays a role to manage and further protect its LAN, it interconnects groups of
host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the
Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to
communicate with the local hosts. Meanwhile, Vigor router will communicate with other
network devices through a public IP address. When the data flow passing through, the
Network Address Translation (NAT) function of the router will dedicate to translate
public/private addresses, and the packets will be delivered to the correct host PC in the local
area network. Thus, all the host PCs can share a common Internet connection.
GGeett YYoouurr PPuubblliicc IIPP AAddddrreessss ffrroomm IISSPP
In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is
required for bridging customer premises equipment (CPE). Point to Point Protocol over
Ethernet (PPPoE) connects a network of hosts via an access device to a remote access
concentrator or aggregation concentrator. This implementation provides users with significant
ease of use. Meanwhile it provides access control, billing, and type of service according to
user requirement.
When a router begins to connect to your ISP, a serial of discovery process will occur to ask for
a connection. Then a session will be created. Your user ID and password is authenticated via
PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and
other related information will usually be assigned by your ISP.
NNeettwwoorrkk CCoonnnneeccttiioonn bbyy 33GG UUSSBB MMooddeemm
For 3G mobile communication through Access Point is popular more and more, Vigor2912
adds the function of 3G network connection for such purpose. By connecting 3G USB Modem
to the USB port of Vigor2912, it can support HSDPA/UMTS/EDGE/GPRS/GSM and the
future 3G standard (HSUPA, etc). Vigor2912n with 3G USB Modem allows you to receive 3G
signals at any place such as your car or certain location holding outdoor activity and share the
bandwidth for using by more people. Users can use four LAN ports on the router to access
Internet. Also, they can access Internet via 802.11n wireless function of Vigor2912n, and
enjoy the powerful firewall, bandwidth management, VPN features of Vigor2912n series.
After connecting into the router, 3G USB Modem will be regarded as the third WAN port.
However, the original WAN1 and WAN2 still can be used and Load-Balance can be done in
the router. Besides, 3G USB Modem in WAN3 also can be used as backup device. Therefore,
when WAN1 and WAN2 are not available, the router will use 3.5G for supporting
Loading...