Draytek Vigor2920 Series, Vigor2920n, Vigor2920V, Vigor2920Vn User Manual

Vigor2920 Series User’s Guide

ii

Vigor2920 Series

Dual-WAN Security Router

User’s Guide

Version: 3.1

Firmware Version: V3.6.7

(For future update, please visit DrayTek website)

Date: May 6, 2014

Vigor2920 Series User’s Guide

iii

Copyright Information

Copyright
Declarations

Copyright© 2014 All rights reserved. This publication contains information that is
protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a
retrieval system, or translated into any language without written permission from the
copyright holders.

Trademarks

The following trademarks are used in this document:

 Microsoft is a registered trademark of Microsoft Corp.
 Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are

trademarks of Microsoft Corp.

 Apple and Mac OS are registered trademarks of Apple Inc.
 Other products may be trademarks or registered trademarks of their respective

manufacturers.

Safety Instructions and Approval

Safety
Instructions

 Read the installation guide thoroughly before you set up the router.
 The router is a complicated electronic unit that may be repaired only be

authorized and qualified personnel. Do not try to open or repair the router
yourself.

 Do not place the router in a damp or humid place, e.g. a bathroom.
 The router should be used in a sheltered area, within a temperature range of +5 to

+40 Celsius.

 Do not expose the router to direct sunlight or other heat sources. The housing and

electronic components may be damaged by direct sunlight or heat sources.

 Do not deploy the cable for LAN connection outdoor to prevent electronic shock

hazards.

 Keep the package out of reach of children.
 When you want to dispose of the router, please follow local regulations on

conservation of the environment.

Warranty

We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, dam aged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revi se the m anual and onli ne
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.

Be a Registered
Owner

Web registration is preferred. You can register your Vigor router via
http://www.DrayTek.com.

Firmware & Tools
Updates

Due to the continuous evolution of DrayTek technology, all routers will be regularly
upgraded. Please consult the DrayTek web site for more information on newest
firmware, tools and documents.

http://www.DrayTek.com

Vigor2920 Series User’s Guide

iv

European Community Declarations

Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu, Taiwan 303
Product: Vigor2920 Series Router

DrayTek Corp. declares that Vigor2920 Series of routers are in compliance with the following essential
requirements and other relevant provisions of R&TTE Directive 1999/5/EEC.

The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by
complying with the requirements set forth in EN55022/Class B and EN55024/Class B.

The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1.

This product is designed for 2.4GHz WLAN network throughout the EC region and Switzerland with restrictions
in France. Please see the user manual for the applicable networks on your product.

Regulatory Information

Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part

15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or televisio n recept i on , whi ch can be determined by turning the equipment of f and
on, the user is encouraged to try to correct the interference by one of the following measures:

 Reorient or relocate the receiving antenna.
 Increase the separation between the equipment and receiver.
 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
 Consult the dealer or an experienced radio/TV technician for help.

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
The antenna/transmitter should be kept at least 20 cm away from human body.
Please visit http://www.draytek.com/user/SupportDLRTTECE.php#

Vigor2920 Series User’s Guide

v

TTaabbllee ooff CCoonntteennttss

INTRODUCTION...........................................................................................1

1.1 Web Configuration Buttons Explanation .......................................................................... 2

1.2 LED Indicators and Connectors.......................................................................................3

1.2.1 For Vigor2920........................................................................................................................... 3

1.2.2 For Vigor2920n......................................................................................................................... 5

1.2.3 For Vigor2920Vn....................................................................................................................... 7

1.2.4 For Vigor2920V......................................................................................................................... 9

1.3 Hardware Installation ..................................................................................................... 11

1.4 Printer Installation .......................................................................................................... 12

1.5 Accessing Web User Interface....................................................................................... 19

1.6 Changing Password....................................................................................................... 20

1.7 Online Status.................................................................................................................. 21

1.7.1 Physical Connection............................................................................................................... 21

1.7.2 Virtual WAN............................................................................................................................ 24

1.8 Saving Configuration...................................................................................................... 24

QUICK SETUP............................................................................................ 25

2.1 Quick Start Wizard......................................................................................................... 25

2.1.1 For WAN1/WAN2 (Ethernet) ..................................................................................................26

2.1.2 For WAN3 (USB).................................................................................................................... 35

2.2 Service Activation Wizard .............................................................................................. 37

2.3 VPN Client Wizard ......................................................................................................... 41

2.4 VPN Server Wizard........................................................................................................ 47

2.5 Wireless Wizard.............................................................................................................52

2.6 VoIP Wizard................................................................................................................... 55

2.7 Registering Vigor Router................................................................................................ 56

TUTORIALS AND APPLICATIONS.............................................................61

3.1 How to configure settings for IPv6 Service .................................................................... 61

3.2 How to Send a Notification to Specified Phone Number via SMS Service in WAN

Disconnection....................................................................................................................... 71

Vigor2920 Series User’s Guide

vi

3.3 How can I get the files from USB storage device connecting to Vigor router?............... 75

3.4 How to configure Multi-Subnet for Vigor Router............................................................. 78

3.5 How to Customize Your Login Page..............................................................................85

3.6 How to use SmartMonitor with Vigor2920 series...........................................................87

3.7 Create a LAN-to-LAN Connection Between Remote Office and Headquarter............... 88

3.8 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter. 96

3.9 QoS Setting Example................................................................................................... 100

3.10 Request a certificate from a CA server on Windows CA Server................................ 105

3.11 Request a CA Certificate and Set as Trusted on Windows CA Server...................... 109

3.12 Creating an Account for MyVigor...............................................................................111

3.12.1 Creating an Account via Vigor Router................................................................................ 111

3.12.2 Creating an Account via MyVigor Web Site........................................................................ 115

ADVANCED WEB CONFIGURATION .....................................................119

4.1 WAN............................................................................................................................. 119

4.1.1 Basics of Internet Protocol (IP) Network............................................................................... 119

4.1.2 General Setup....................................................................................................................... 121

4.1.3 Internet Access..................................................................................................................... 126

4.1.4 Multi-VLAN............................................................................................................................ 146

4.2 LAN.............................................................................................................................. 149

4.2.1 Basics of LAN....................................................................................................................... 149

4.2.2 General Setup....................................................................................................................... 151

4.2.3 Static Route.......................................................................................................................... 159

4.2.4 VLAN..................................................................................................................................... 164

4.2.5 Bind IP to MAC..................................................................................................................... 167

4.2.6 LAN Port Mirror..................................................................................................................... 168

4.2.7 Wired 802.1x......................................................................................................................... 169

4.2.8 Web Portal Setup.................................................................................................................. 170

4.3 Load-Balance /Route Policy......................................................................................... 171

4.4 NAT.............................................................................................................................. 176

4.4.1 Port Redirection.................................................................................................................... 176

4.4.2 DMZ Host.............................................................................................................................. 180

4.4.3 Open Ports............................................................................................................................ 183

4.4.4 Port Triggering...................................................................................................................... 185

4.5 Firewall......................................................................................................................... 188

4.5.1 Basics for Firewall................................................................................................................. 188

4.5.2 General Setup....................................................................................................................... 190

4.5.3 Filter Setup ........................................................................................................................... 194

4.5.4 DoS Defense ........................................................................................................................ 203

4.6 User Management........................................................................................................ 206

4.6.1 General Setup....................................................................................................................... 207

4.6.2 User Profile........................................................................................................................... 208

4.6.3 User Group........................................................................................................................... 213

Vigor2920 Series User’s Guide

vii

4.6.4 User Online Status................................................................................................................ 214

4.7 Objects Settings........................................................................................................... 215

4.7.1 IP Object............................................................................................................................... 215

4.7.2 IP Group ............................................................................................................................... 218

4.7.3 IPv6 Object........................................................................................................................... 220

4.7.4 IPv6 Group............................................................................................................................ 222

4.7.5 Service Type Object .............................................................................................................224

4.7.6 Service Type Group.............................................................................................................. 226

4.7.7 Keyword Object ....................................................................................................................228

4.7.8 Keyword Group..................................................................................................................... 230

4.7.9 File Extension Object............................................................................................................ 232

4.7.10 SMS/Mail Service Object.................................................................................................... 234

4.7.11 Notification Object............................................................................................................... 239

4.8 CSM Profile.................................................................................................................. 241

4.8.1 APP Enforcement Profile...................................................................................................... 242

4.8.2 URL Content Filter Profile..................................................................................................... 246

4.8.3 Web Content Filter Profile .................................................................................................... 250

4.8.4 DNS Filter............................................................................................................................. 253

4.8.5 APPE Support List................................................................................................................ 255

4.9 Bandwidth Management .............................................................................................. 256

4.9.1 Sessions Limit....................................................................................................................... 256

4.9.2 Bandwidth Limit ....................................................................................................................258

4.9.3 Quality of Service.................................................................................................................. 260

4.9.4 APP QoS .............................................................................................................................. 268

4.10 Applications................................................................................................................ 270

4.10.1 Dynamic DNS..................................................................................................................... 270

4.10.2 LAN DNS............................................................................................................................ 273

4.10.3 Schedule............................................................................................................................. 275

4.10.4 RADIUS.............................................................................................................................. 278

4.10.5 Active Directory/LDAP........................................................................................................ 278

4.10.6 UPnP .................................................................................................................................. 281

4.10.7 IGMP................................................................................................................................... 284

4.10.8 Wake on LAN...................................................................................................................... 285

4.10.9 SMS/Mail Alert Service....................................................................................................... 286

4.11 VPN and Remote Access........................................................................................... 288

4.11.1 Remote Access Control...................................................................................................... 288

4.11.2 PPP General Setup ............................................................................................................ 288

4.11.3 IPSec General Setup.......................................................................................................... 290

4.11.4 IPSec Peer Identity............................................................................................................. 292

4.11.5 Remote Dial-in User ...........................................................................................................294

4.11.6 LAN to LAN......................................................................................................................... 298

4.11.7 VPN TRUNK Management................................................................................................. 308

4.11.8 Connection Management ................................................................................................... 313

4.12 Certificate Management............................................................................................. 315

4.12.1 Local Certificate.................................................................................................................. 315

4.12.2 Trusted CA Certificate ........................................................................................................318

4.12.3 Certificate Backup............................................................................................................... 319

4.13 VoIP ........................................................................................................................... 319

4.13.1 DialPlan .............................................................................................................................. 321

4.13.2 SIP Accounts...................................................................................................................... 331

4.13.3 Phone Settings ...................................................................................................................335

4.13.4 Status.................................................................................................................................. 341

Vigor2920 Series User’s Guide

viii

4.14 Wireless LAN ............................................................................................................. 342

4.14.1 Basic Concepts................................................................................................................... 342

4.14.2 General Setup..................................................................................................................... 344

4.14.3 Security............................................................................................................................... 346

4.14.4 Access Control.................................................................................................................... 348

4.14.5 WPS.................................................................................................................................... 349

4.14.6 WDS.................................................................................................................................... 352

4.14.7 Advanced Setting................................................................................................................ 355

4.14.8 WMM Configuration............................................................................................................ 357

4.14.9 AP Discovery...................................................................................................................... 358

4.14.10 Station List........................................................................................................................ 360

4.14.11 Bandwidth Management................................................................................................... 361

4.15 USB Application......................................................................................................... 362

4.15.1 USB General Settings ........................................................................................................ 362

4.15.2 USB User Management...................................................................................................... 363

4.15.3 File Explorer........................................................................................................................ 365

4.15.4 USB Disk Status................................................................................................................. 366

4.15.5 Modem Support List............................................................................................................ 367

4.16 System Maintenance.................................................................................................. 367

4.16.1 System Status..................................................................................................................... 368

4.16.2 HTTPS Encryption Setup ................................................................................................... 369

4.16.3 TR-069................................................................................................................................ 370

4.16.4 Administrator Password...................................................................................................... 371

4.16.5 User Password ................................................................................................................... 374

4.16.6 Login Page Greeting........................................................................................................... 376

4.16.7 Configuration Backup .........................................................................................................377

4.16.8 Syslog/Mail Alert................................................................................................................. 379

4.16.9 Time and Date.................................................................................................................... 382

4.16.10 SNMP ............................................................................................................................... 383

4.16.11 Management..................................................................................................................... 385

4.16.12 Reboot System................................................................................................................. 388

4.16.13 Firmware Upgrade............................................................................................................ 389

4.16.14 Activation.......................................................................................................................... 390

4.17 Diagnostics................................................................................................................. 391

4.17.1 Dial-out Triggering.............................................................................................................. 392

4.17.2 Routing Table .....................................................................................................................393

4.17.3 ARP Cache Table............................................................................................................... 394

4.17.4 IPv6 Neighbour Table......................................................................................................... 394

4.17.5 DHCP Table........................................................................................................................ 395

4.17.6 NAT Sessions Table........................................................................................................... 396

4.17.7 Data Flow Monitor............................................................................................................... 397

4.17.8 Traffic Graph....................................................................................................................... 399

4.17.9 Ping Diagnosis.................................................................................................................... 400

4.17.10 Trace Route...................................................................................................................... 401

4.17.11 Syslog Explorer................................................................................................................. 402

4.17.12 TSPC Status..................................................................................................................... 404

4.18 External Devices........................................................................................................ 405

TROUBLE SHOOTING.............................................................................407

5.1 Checking If the Hardware Status Is OK or Not............................................................. 407

Vigor2920 Series User’s Guide

ix

5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not........... 408

5.3 Pinging the Router from Your Computer...................................................................... 410

5.4 Checking If the ISP Settings are OK or Not.................................................................412

5.5 Problems for 3G Network Connection.......................................................................... 412

5.6 Backing to Factory Default Setting If Necessary.......................................................... 413

5.7 Contacting Your Dealer................................................................................................ 414

APPENDIX I: VLAN APPLICATIONS ON VIGOR ROUTER..........................................415

APPENDIX II: RELEASE NOTE .....................................................................................423

Vigor2920 Series User’s Guide

1

IInnttrroodduuccttiioonn

Vigor2920 series is a broadband router. It integrates IP layer QoS, NAT session/bandwidth
management to help users control works well with large bandwidth.

By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DS, the
router increases the performance of VPN greatly, and offers several protocols (such as
IPSec/PPTP/L2TP) with up to 2 VPN tunnels.

The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set
firewall policy with ease. CSM (Content Security Management) provides users control and
management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before.
By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security
outside and control inside.

Object-based firewall is flexible and allows your network be safe. In addition, Vigor2920
series supports USB interface for connecting USB printer to share printer or USB storage
device for sharing files.

Vigor2920 series provides two-level management to simplify the configuration of network
connection. The user mode allows user accessing into WEB interface via simple configuration.
However, if users want to have advanced configurations, they can access into WEB interface
through admin mode.

Vigor2920 Series User’s Guide

2

11..11 WWeebb CCoonnffiigguurraattiioonn BBuuttttoonnss EExxppllaannaattiioonn

Several main buttons appeared on the web pages are defined as the following:

Save and apply current settings.

Cancel current settings and recover to the previous saved settings.

Clear all the selections and parameters settings, including selection from

drop-down list. All the values must be reset with factory default settings.

Add new settings for specified item.

Edit the settings for the selected item.

Delete the selected item with the corresponding settings.

Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed
explanation.

Vigor2920 Series User’s Guide

3

11..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss

Before you use the Vigor router, please get acquainted with the LED indicators and connectors
first.

11..22..11 FFoorr VViiggoorr22992200

LED Status Explanation

Blinking The router is powered on and running norm al l y . ACT (Activity)
Off The router is powered off.
On USB device is connected and ready for use. USB
Blinking The data is transmitting.

CSM On The profile(s) of CSM (Content Security

Management) for IM/P2P, URL/Web Content Filter
application is enabled from Firewall >>General

Setup. (Such profile must be established under
CSM menu).

WCF On The Web Content Filter is active. (It is enabled

from Firewall >> General Setup).

On The WAN1 or WAN2 connection is ready. WAN1/2
Blinking It will blink while transmitting data.
On The DoS/DDoS function is active. DoS

Blinking It will blink while an attack is detected.
VPN On The VPN tunnel is active.
QoS

On The QoS function is active.

LED on Connector

On The port is connected.

Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.

On The port is connected with 100Mbps.

WAN1

Right LED
(Green)

Off The port is connected with 10Mbps when left LED

is on.
On The port is connected.
Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.
On The port is connected with 1000Mbps.

WAN2(Giga)

Right LED
(Green)

Off The port is connected with 10/100Mbps when left

LED is on.
On The port is connected.
Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.
On The port is connected with 1000Mbps.

GigaLAN
1/2/3/4

Right LED
(Green)

Off The port is connected with 10/100Mbps when left

LED is on.

Vigor2920 Series User’s Guide

4

Interface Description

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking).

Press the hole and keep for more than 5 seconds. When you see the ACT LED
begins to blink rapidly than usual, release the button. Then the router will

restart with the factory default configuration.
GigaLAN (1-4) Connecters for local networked devices.
WAN1/WAN2(Giga) Connecters for remote networked devices.
USB Connecter for 3G Modem or printer.

PWR

Connecter for a power adapter.
ON/OFF

Power Switch.

Vigor2920 Series User’s Guide

5

11..22..22 FFoorr VViiggoorr22992200nn

LED Status Explanation

Blinking The router is powered on and running norm al l y . ACT (Activity)
Off The router is powered off.
On USB device is connected and ready for use. USB
Blinking The data is transmitting.

CSM On The profile(s) of CSM (Content Security

Management) for IM/P2P, URL/Web Content Filter
application is enabled from Firewall >>General

Setup. (Such profile must be established under
CSM menu).

On

Wireless access point is ready.

WLAN

Blinking

It will blink slowly while wireless traffic goes
through.

If ACT and WLAN LEDs blink quickly and
simultaneously when WPS is working, and it will
return to normal condition after two minutes. (You
need to setup WPS within 2 minutes.)

On The WAN1 or WAN2 connection is ready. WAN1/2
Blinking It will blink while transmitting data.
On The DoS/DDoS function is active. DoS

Blinking It will blink while an attack is detected.
VPN On The VPN tunnel is active.
QoS

On The QoS function is active.

LED on Connector

On The port is connected.

Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.

On The port is connected with 100Mbps.

WAN1

Right LED
(Green)

Off The port is connected with 10Mbps when left LED

is on.
On The port is connected.
Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.
On The port is connected with 1000Mbps.

WAN2(Giga)

Right LED
(Green)

Off The port is connected with 10/100Mbps when left

LED is on.
On The port is connected.
Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.
On The port is connected with 1000Mbps.

GigaLAN
1/2/3/4

Right LED
(Green)

Off The port is connected with 10/100Mbps when left

LED is on.

Vigor2920 Series User’s Guide

6

Interface Description

Wireless LAN
ON/OFF/WPS

Press "Wireless LAN ON/OFF/WPS" button once to wait for client device
making network connection through WPS.
Press "Wireless LAN ON/OFF/WPS" button twice to enable (WLAN LED on)
or disable (WLAN LED off) wireless connection.

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking).

Press the hole and keep for more than 5 seconds. When you see the ACT LED
begins to blink rapidly than usual, release the button. Then the router will

restart with the factory default configuration.
GigaLAN (1-4) Connecters for local networked devices.
WAN1/WAN2(Giga) Connecters for remote networked devices.
USB Connecter for 3G Modem or printer.

PWR

Connecter for a power adapter.
ON/OFF

Power Switch.

Vigor2920 Series User’s Guide

7

11..22..33 FFoorr VViiggoorr22992200VVnn

LED Status Explanation

Blinking The router is powered on and running normally. ACT (Activity)
Off The router is powered off.
On USB device is connected and ready for use. USB
Blinking The data is transmitting.

CSM On The profile(s) of CSM (Content Security

Management) for IM/P2P, URL/Web Content Filter
application can be enabled from Firewall
>>General Setup. (Such profile must be
established under CSM menu).

On

Wireless access point is ready.

WLAN

Blinking

It will blink slowly while wireless traffic goes
through.

If ACT and WLAN LEDs blink quickly and
simultaneously when WPS is working, and it will
return to normal condition after two minutes. (You
need to setup WPS within 2 minutes.)

On The WAN1 or WAN2 connection is ready. WAN1/2
Blinking It will blink while transmitting data.
On A PSTN phone call comes (in and out). However,

when the phone call is disconnected, the LED will
be off.

Line

Off There is no PSTN phone call.
On The phone connected to this port is off-hook.
Off The phone connected to this port is on-hook.

Phone 1/2

Blinking A phone call comes.

LED on Connector

On The port is connected.
Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.
On The port is connected with 1000Mbps.

WAN1/
WAN2 (Giga)

Right LED
(Green)

Off The port is connected with 10/100Mbps when left

LED is on.
On The port is connected.
Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.
On The port is connected with 1000Mbps.

GigaLAN
1/2/3/4

Right LED
(Green)

Off The port is connected with 10/100Mbps when left

LED is on.

Vigor2920 Series User’s Guide

8

Interface Description

Wireless LAN
ON/OFF/WPS

Press "Wireless LAN ON/OFF/WPS" button once to wait for client device
making network connection through WPS.
Press "Wireless LAN ON/OFF/WPS" button twice to enable (WLAN LED on)
or disable (WLAN LED off) wireless connection.

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking).

Press the hole and keep for more than 5 seconds. When you see the ACT LED
begins to blink rapidly than usual, release the button. Then the router will

restart with the factory default configuration.
Phone 1/2 Connecter for analog phone(s).
Line Connector for PSTN life line.
GigaLAN (1-4) Connecters for local networked devices.
WAN1/WAN2(Giga) Connecters for remote networked devices.
USB Connecter for Mobile HDD, 3G Modem or print er.

PWR

Connecter for a power adapter.
ON/OFF

Power Switch.

Vigor2920 Series User’s Guide

9

11..22..44 FFoorr VViiggoorr22992200VV

LED Status Explanation

Blinking The router is powered on and running norm al l y . ACT (Activity)
Off The router is powered off.
On USB device is connected and ready for use. USB
Blinking The data is transmitting.

CSM On The profile(s) of CSM (Content Security

Management) for IM/P2P, URL/Web Content Filter
application can be enabled from Firewall
>>General Setup. (Such profile must be established
under CSM menu).

WCF On The Web Content Filter is active. (It is enabled from

Firewall >> General Setup).

On The WAN1 or WAN2 connection is ready. WAN1/2
Blinking It will blink while transmitting data.
On The DoS/DDoS function is active. DoS
Blinking It will blink while deleting an attack.
On The phone connected to this port is off-hook.
Off The phone connected to this port is on-hook.

Phone 1/2

Blinking A phone call comes.

LED on Connector

On The port is connected.
Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.
On The port is connected with 1000Mbps.

WAN 1/
WAN2 (Giga)

Right LED
(Green)

Off The port is connected with 10/100Mbps when left

LED is on.

On The port is connected.
Off The port is disconnected.

Left LED
(Green)

Blinking The data is transmitting.
On The port is connected with 1000Mbps.

GigaLAN
1/2/3/4

Right LED
(Green)

Off The port is connected with 10/100Mbps when left

LED is on.

Vigor2920 Series User’s Guide

10

Interface Description

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is

blinking). Press the hole and keep for more than 5 seconds. When you see
the ACT LED begins to blink rapidly than usual, release the button. Then the

router will restart with the factory default configuration.
Phone 1/2 Connecters for analog phone(s).
GigaLAN (1-4) Connecters for local networked devices.
WAN1/WAN2(Giga) Connecters for remote networked devices.
USB Connecter for Mobile HDD, 3G Modem or print er.
PWR Connecter for a power adapter.

ON/OFF Power Switch.

Vigor2920 Series User’s Guide

11

11..33 HHaarrddwwaarree IInnssttaallllaattiioonn

Before starting to configure the router, you have to connect your devices correctly.

1. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router

with Ethernet cable (RJ-45).

2. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router and

the other end of the cable (RJ-45) into the Ethernet port on your computer.

3. Connect one end of the power adapter to the router’s power port on the rear panel, and

the other side into a wall outlet.

4. Power on the device by pressing down the power switch on the rear panel.

5. The system starts to initiate. After completing the system test, the ACT LED will light

up and start blinking.

(For the detailed information of LED status, please refer to section 1.1.)

Vigor2920 Series User’s Guide

12

11..44 PPrriinntteerr IInnssttaallllaattiioonn

You can install a printer onto the router for sharing printing. All the PCs connected this router
can print documents via the router. The example provided here is made based on Windows 7.
For installation on other Windows systems, please visit www.DrayTek.com.

Before using it, please follow the steps below to configure settings for connected computers
(or wireless clients).

1. Connect the printer with the router through USB/parallel port.

2. Open All Programs>>Getting Started>>Devices and Printers.

Vigor2920 Series User’s Guide

13

3. Click Add a printer.

4. A dialog will appear. Click Add a local printer and click Next.

5. In this dialog, choose Create a new port. In the field of Type of port, use the drop

down list to select Standard TCP/IP Port. Then, click Next.

Vigor2920 Series User’s Guide

14

6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or

IP Address and type 192.168.1.1 as the Port name. Then, click Next.

7. Click Standard and choose Generic Network Card.

Vigor2920 Series User’s Guide

15

8. Now, your system will ask you to choose right name of the printer that you installed onto

the router. Such step can make correct driver loaded onto your PC. When you finish the
selection, click Next.

9. Type a name for the chosen printer. Click Next.

Vigor2920 Series User’s Guide

16

10. Choose Do not share this printer and click Next.

11. Then, in the following dialog, click Finish.

Vigor2920 Series User’s Guide

17

12. The new printer has been added and displayed under Printers and Faxes. Click the new

printer icon and click Printer server properties.

13. Edit the property of the new printer you have added by clicking Configure Port.

Vigor2920 Series User’s Guide

18

14. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next

please refer to the red rectangle for choosing the correct protocol and LPR name.

The printer can be used for printing now. Most of the printers with different manufacturers are
compatible with vigor router.

Vigor2920 Series User’s Guide

19

Note 1: Some printers with the fax/scanning or other additional functions are not
supported. If you do not know whether your printer is supported or not, please visit
www.DrayTek.com to find out the printer list. Open Support > FAQ/Application Notes;
find out the link of Printer Server and click it; then click the What types of printers are

compatible with Vigor router? link.

Note 2: Vigor router supports printing request from computers via LAN ports but not

WAN port.

11..55 AAcccceessssiinngg WWeebb UUsseerr IInntteerrffaaccee

1. Make sure your PC connects to the router correctly.

Notice: You may either simply set up your computer to get IP dynamically
from the router or set up the IP address of the computer to be the same subnet as
the default IP address of Vigor router 192.168.1.1. For the detailed
information, please refer to the later section - Trouble Shooting of the guide.

2. Open a web browser on your PC and type http://192.168.1.1. The following window

will be open to ask for username and password.

3. Please type “admin/admin” on Username/Password and click Login.

Notice: If you fail to access to the web configuration, please go to “Trouble
Shooting” for detecting and solving your problem.

Vigor2920 Series User’s Guide

20

4. The web page can be logged out according to the chosen condition. The default setting is

Auto Logout, which means the web configuration system will logout after 5 minutes
without any operation. Change the setting for your necessity.

11..66 CChhaannggiinngg PPaasssswwoorrdd

Please change the password for the original security of the router.

1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will

open to ask for username and password.

2. Please type “admin/admin” as Username/Password for accessing into the web user

interface with admin mode.

3. Now, the Main Screen will appear.

Note: The home page will change slightly in accordance with the type of the router
you have.

4. Go to System Maintenance page and choose Administrator Password.

Vigor2920 Series User’s Guide

21

5. Type the login password on the field of Old Password. Type a new password in New

Password and Confirm New Password fields. Then click OK to continue.

6. Now, the password has been changed. Next time, use the new password to access the

Web user interface for this router.

11..77 OOnnlliinnee SSttaattuuss

11..77..11 PPhhyyssiiccaall CCoonnnneeccttiioonn

Such page displays the physical connection status such as LAN connection status, WAN
connection status, ADSL information, and so on.

PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv44 PPrroottooccooll

Vigor2920 Series User’s Guide

22

PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv66 PPrroottooccooll

Detailed explanation (for IPv4) is shown below:

Item Description
LAN Status Primary DNS

- Displays the IP address of the primary DNS.
Secondary DNS

- Displays the IP address of the secondary DNS.
IP Address

- Displays the IP address of the LAN interface.
TX Packets

- Displays the total transmitted packets at the LAN interface.
RX Packets

- Displays the total number of received packets at the LAN
interface.

WAN 1 Status ~ WAN 3
Status

Line

- Displays the physical connection of this interface.
Name

- Displays the name set in WAN1/WAN web page.
Mode

- Displays the type of WAN connection (e.g., PPPoE).
Up Time

- Displays the total uptime of the interface.
IP

- Displays the IP address of the WAN interface.
GW IP

- Displays the IP address of the default gateway.
TX Packets

- Displays the total transmitted packets at the WAN interface.
TX Rate

- Displays the speed of transmitted octets at the WAN
interface.

Vigor2920 Series User’s Guide

23

Item Description

RX Packets

- Displays the total number of received packets at the WAN
interface.

RX Rate

- Displays the speed of received octets at the WAN interface.

Detailed explanation (for IPv6) is shown below:

Item Description
LAN Status

IP Address- Displays the IPv6 address of the LAN

interface..
TX Packets-Displays the total transmitted packets at the

LAN interface.
RX Packets-Displays the total received packets at the LAN

interface.
TX Bytes - Displays the total transmitted octets at the LAN

interface.
RX Bytes - Displays the total received octets at the LAN

interface.

WAN IPv6 Status

Enable – No in red means such interface is available but

not enabled. Yes in green means such interface is enabled.
No in red means such interface is not available.

Mode - Displays the type of WAN connection (e.g., TSPC).
Up Time - Displays the total uptime of the interface.
IP - Displays the IP address of the WAN interface.
Gateway IP - Displays the IP address of the default

gateway.

Note: The words in green mean that the WAN connection of that interface is ready for

accessing Internet; the words in red mean that the WAN connection of that interface is not
ready for accessing Internet.

Vigor2920 Series User’s Guide

24

11..77..22 VViirrttuuaall WWAANN

Such page displays the virtual WAN connection information. Virtual WAN are used by
TR-069 management, VoIP service and so on. The Application field will list the purpose of
such WAN connection.

11..88 SSaavviinngg CCoonnffiigguurraattiioonn

Each time you click OK on the web page for saving the configuration, you can find messages
showing the system interaction with you.

Ready indicates the system is ready for you to input settings.
Settings Saved means your settings are saved once you click Finish or OK button.

Vigor2920 Series User’s Guide

25

Q

Quuiicckk SSeettuupp

There are several setup wizards offered for you to configure the router simply and quickly.

 Quick Start Wizard – used for building network connection, Internet access.
 Service Activation Wizard – used for activating the web content filter service.
 VPN Client Wizard – used for establishing VPN tunnel; the router is treated as a VPN

client.

 VPN Server Wizard – used for establishing VPN tunnel; the router is treated as a VPN

server.

 Wireless Wizard – used for building wireless LAN connection.
 VoIP Wizard – used for establishing VoIP profile.

22..11 QQuuiicckk SSttaarrtt WWiizzaarrdd

If your router can be under an environment with high speed NAT, the configuration provide
here can help you to deploy and use the router quickly. The first screen of Quick Start
Wizard is entering login password. After typing the password, please click Next.

On the next page as shown below, please select the WAN interface that you use. If Ethernet
interface is used, please choose WAN1/2 (based on the physical hardware connection); if 3G
USB modem is used, please choose WAN3. Choose Auto negotiation as the physical type for
your router. Then click Next for next step.

Vigor2920 Series User’s Guide

26

WAN1/WAN2 and WAN3 will bring up different configuration page. Refer to the following
for detailed information.

22..11..11 FFoorr WWAANN11//WWAANN22 ((EEtthheerrnneett))

Choose WAN1/WAN2 and click Next to display the following page.
Please select the appropriate Internet access type according to the information from your ISP.

For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then
click Next for next step.

22..11..11..11 PPPPPPooEE

PPPoE stands for Point-to-Point Protocol over Ethernet. It relies on two widely accepted
standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a
common broadband medium, such as wireless device or cable modem. All the users over the
Ethernet can share a common connection.

PPPoE is used for most of modem users. All local users can share one PPPoE connection for
accessing the Internet. Your service provider will provide you information about user name,
password, and authentication mode. If your ISP provides you the PPPoE connection, please
select PPPoE for this router.

Vigor2920 Series User’s Guide

27

1. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following

page will be open for you to specify Internet Access Type.

2. Click PPPoE as the Internet Access Type. Then click Next to open the following page.

Available settings are explained as follows:

Item Description
Service Name

(Optional)

Type the description of the specific network service.

User Name

Assign a specific valid user name provided by the ISP.

Password

Assign a valid password provided by the ISP.

Confirm Password

Retype the password.

Vigor2920 Series User’s Guide

28

Back

Click it to return to previous setting page.

Next

Click it to get into the next setting page.

Cancel

Click it to give up the quick start wizard.

3. Please manually Type the Username/Password provided by your ISP. Click Next for

viewing summary of such connection.

4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system

status of this protocol will be shown.

5. Now, you can enjoy surfing on the Internet.

Vigor2920 Series User’s Guide

29

22..11..11..22 PPPPTTPP//LL22TTPP

Click PPTP/L2TP as the protocol. Type in all the information that your ISP provides for this
protocol.

1. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following

page will be open for you to specify Internet Access Type.

2. Click PPTP/L2TP as the Internet Access Type. Then click Next to continue.

Vigor2920 Series User’s Guide

30

Available settings are explained as follows:

Item Description
User Name

Assign a specific valid user name provided by the ISP.

Password

Assign a valid password provided by the ISP.

Confirm Password

Retype the password.

WAN IP
Configuration

Obtain an IP address automatically – the router will get an

IP address automatically from DHCP server.
Specify an IP address – you have to type relational settings

manually.

IP Address - Type the IP address.
Subnet Mask –Type the subnet mask.

Gateway – Type the IP address of the gateway.

Primary DNS –Type in the primary IP address for the router.
Second DNS –Type in secondary IP address for necessity in

the future.

PPTP Server /
L2TP Server

Type the IP address of the server.

Back

Click it to return to previous setting page.

Next

Click it to get into the next setting page.

Cancel

Click it to give up the quick start wizard.

3. Click Next for viewing summary of such connection.

4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system

status of this protocol will be shown.

Vigor2920 Series User’s Guide

31

5. Now, you can enjoy surfing on the Internet.

22..11..11..33 SSttaattiicc IIPP

1. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following

page will be open for you to specify Internet Access Type.

2. Click Static IP as the Internet Access Type. Then click Next to continue.

Available settings are explained as follows:

Item Description
WAN IP

Type the IP address.

Subnet Mask

Type the subnet mask.

Gateway

Type the IP address of gateway.

Primary DNS

Type in the primary IP address for the router.

Secondary DNS

Type in secondary IP address for necessity in the future.

Vigor2920 Series User’s Guide

32

Back

Click it to return to previous setting page.

Next

Click it to get into the next setting page.

Cancel

Click it to give up the quick start wizard.

3. After finishing the settings in this page, click Next to see the following page.

4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system

status of this protocol will be shown.

5. Now, you can enjoy surfing on the Internet.

Vigor2920 Series User’s Guide

33

22..11..11..44 DDHHCCPP

Click DHCP as the protocol. Type in all the information that your ISP provides for this
protocol.

1. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following

page will be open for you to specify Internet Access Type.

2. Click DHCP as the Internet Access Type. Then click Next to continue.

Available settings are explained as follows:

Item Description
Host Name

Type the name of the host.

MAC

Some Cable service providers specify a specific MAC
address for access authentication. In such cases you need to
Type the MAC address.

Vigor2920 Series User’s Guide

34

Back

Click it to return to previous setting page.

Next

Click it to get into th/e next setting page.

Cancel

Click it to give up the quick start wizard.

3. After finishing the settings in this page, click Next to see the following page.

4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system

status of this protocol will be shown.

5. Now, you can enjoy surfing on the Internet.

Vigor2920 Series User’s Guide

35

22..11..22 FFoorr WWAANN33 ((UUSSBB))

To use 3G USB modem for network connection, please choose WAN3.

1. Choose WAN3 as the WAN Interface and click the Next button. The following page will

be open for you to specify Internet Access Type.

2. Then, click Next to continue.

Available settings are explained as follows:

Item Description
Internet Access

Choose one of the selections as the protocol of accessing the
internet.

3G/4G USB Modem
(PPP mode)

SIM Pin code –Type PIN code of the SIM card that will be

used to access Internet. The maximum length of the pin code
you can set is 15 characters.

Modem Initial String – Such value is used to initialize USB

Vigor2920 Series User’s Guide

36

modem. Please use the default value. If you have any
question, please contact to your ISP. The maximum length of
the string you can set is 47 characters.

APN Name – APN means Access Point Name which is
provided and required by some ISPs. Type the name and
click Apply.

4G USB Modem
(DHCP mode)

SIM Pin code –Type PIN code of the SIM card that will be

used to access Internet.
Network Mode – Force Vigor router to connect Internet with

the mode specified here. If you choose 4G/3G/2G as network
mode, the router will choose a suitable one according to the
actual wireless signal automatically.

APN Name – APN means Access Point Name which is
provided and required by some ISPs.

3. Then, click Next for viewing summary of such connection.

4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system

status of this protocol will be shown.

5. Now, you can enjoy surfing on the Internet.

Vigor2920 Series User’s Guide

37

22..22 SSeerrvviiccee AAccttiivvaattiioonn WWiizzaarrdd

Service Activation Wizard can guide you to activate WCF service (Web Content Filter) with a
quick and easy way.

Note:Web Content Filter (WCF) is not a built-in service of Vigor router, but a service
powered by Commtouch. If you want to use such service (trial or formal edition), you
have to perform the procedure of activation first. For the service of formal edition, please
contact with your dealer for detailed information.

Service Activation Wizard is a tool which allows you to use trial version or update the license
of WCF directly without accessing into the server (MyVigor) located on
http://myvigor.draytek.com

. For using Web Content Filter Profile, please refer to later section

Web Content Filter Profile for detailed information.
Now, follow the steps listed below to activate WCF feature for your router.

1. Open Service Activation Wizard.

2. The screen of Service Activation Wizard will be shown as follows. Choose the one you

need and click Next. In this case, we choose to activate free trial edition.

Free trial edition: it offers a period of trial for you to get acquainted with WCF function.
Formal edition with license key: it offers a period of valid time (e.g., one year) for WCF

function.

Note: If you activate Formal edition with license key first, the free trial edition will
be invalid.

Vigor2920 Series User’s Guide

38

3. In the following page, you can activate the Web content filter services at the same time

or individually. When you finish the selection, please click Next.

Commtouch is the web content filter based on Commtouch operated in the
worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's
prepared Commtouch GlobalView WCF package from retailing outlets.

BPjM is WCF for German Speaking users. The fragfINN is whitelist for German
Speaking users. The BPjM is ideal for your family to provide more Internet security
for youngsters.

The fragFINN is designed for protecting kids from inadequate web sites. More info
is available at http://www.draytek.de/jugendschutz .

4. Setting confirmation page will be displayed as follows, please click Next.

5. Wait for a moment till the following page appears.

Vigor2920 Series User’s Guide

39

When such page appears, you can enable or disable these services for your necessity.
Then, click Finish.

Note: The service will be activated and applied as the default rule configured in
Firewall>>General Setup.

6. Now, the web page will display the service that you have activated according to your

selection(s). The valid time for the free trial of these services is 30-day.

Later, if you need to extend the license valid time for the same service, you can also use the

Service Activation Wizard again to reach your goal by clicking the radio button of Formal
edition with license key and clicking Next.

Vigor2920 Series User’s Guide

40

Vigor2920 Series User’s Guide

41

22..33 VVPPNN CClliieenntt WWiizzaarrdd

Such wizard is used to configure VPN settings for VPN client. Such wizard will guide to set
the LAN-to-LAN profile for VPN dial out connection (from server to client) step by step.

1. Open VPN and Remote Access>>VPN Client Wizard. The following page will appear.

Available settings are explained as follows:

Item Description
LAN-to-LAN Client

Mode Selection

Choose the client mode.
Route Mode/NAT Mode – If the remote network only allows
you to dial in with single IP, please choose this mode,
otherwise please choose Route Mode.

Please choose a
LAN-to-LAN
Profile

There are 32 VPN profiles for users to set.

Vigor2920 Series User’s Guide

42

Item Description

2. When you finish the mode and profile selection, please click Next to open the following

page.

In this page, you have to select suitable VPN type for the VPN client profile. There are
six types provided here. Different type will lead to different configuration page. After
making the choices for the client profile, please click Next. You will see different
configurations based on the selection(s) you made.

Vigor2920 Series User’s Guide

43

 When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the

following graphic:

 When you choose IPSec, you will see the following graphic:

Vigor2920 Series User’s Guide

44

 When you choose L2TP, you will see the following graphic:

 When you choose L2TP over IPSec (Nice to Have) or L2TP over IPSec (Must), you

will see the following graphic:

Available settings are explained as follows:

Item Description
Profile Name

Type a name for such profile. The length of the file is limited
to 10 characters.

Vigor2920 Series User’s Guide

45

Item Description
VPN Dial-Out

Through

Use the drop down menu to choose a proper WAN interface
for this profile. This setting is useful for dial-out only.

WAN1 First/ WAN2 First/ WAN3 First - While connecting,
the router will use WAN1/WAN2/WAN3 as the first channel
for VPN connection. If WAN1/WAN2/WAN3 fails, the router
will use another WAN interface instead.

WAN1 Only /WAN2 Only/WAN 3 Only- While connecting,
the router will use WAN1/WAN2/WAN3 as the only channel
for VPN connection.

WAN1 Only: Backup WAN2 - While connecting, the router
will use WAN2 for VPN connection. If WAN2 fails, the router
will use backup WAN1 interface instead.

WAN2 Only: Backup WAN1 - While connecting, the router
will use WAN1 for VPN connection. If WAN1 fails, the router
will use backup WAN2 interface instead.

Always On

Check to enable router always keep VPN connection.

Pre-Shared Key

IKE Authentication Method usually applies to those are

remote dial-in user or node (LAN to LAN) which uses
dynamic IP address and IPSec-related VPN connections such
as L2TP over IPSec and IPSec tunnel.

Pre-Shared Key- Specify a key for IKE authentication.
Confirm Pre-Shared Key-Confirm the pre-shared key.

Digital Signature
(X.509)

Click Digital Signature to invoke this function. Use the drop
down list to choose one of the certificates for using. You have
to configure one certificate at least previously in Certificate
Management >> Local Certificate. Otherwise, the setting
you choose here will not be effective.

Peer ID – Choose the peer ID selection from the drop down
list.

Local ID – Choose Alternative Subject Name First or
Subject Name First.

IPSec Security
Method

Medium - Authentication Header (AH) means data will be

authenticated, but not be encrypted. By default, this option is
active.

High - Encapsulating Security Payload (ESP) means payload
(data) will be encrypted and authenticated. You may select
encryption algorithm from Data Encryption Standard (DES),
Triple DES (3DES), and AES.

Vigor2920 Series User’s Guide

46

Item Description
User Name

This field is used to authenticate for connection when you
select PPTP or L2TP with or without IPSec policy above.

Password

This field is used to authenticate for connection when you
select PPTP or L2TP with or without IPSec policy above.

Remote Network IP

Please type one LAN IP address (according to the real location
of the remote host) for building VPN connection.

Remote Network
Mask

Please type the network mask (according to the real location of
the remote host) for building VPN connection.

3. After finishing the configuration, please click Next. The confirmation page will be

shown as follows. If there is no problem, you can click one of the radio buttons listed on
the page and click Finish to execute the next action.

Available settings are explained as follows:

Item Description
Go to the VPN

Connection
Management

Click this radio button to access VPN and Remote
Access>>Connection Management for viewing VPN

Connection status.

Do another VPN
Server Wizard
Setup

Click this radio button to set another profile of VPN Server
through VPN Server Wizard.

View more detailed
configuration

Click this radio button to access VPN and Remote
Access>>LAN to LAN for viewing detailed configuration.

Vigor2920 Series User’s Guide

47

22..44 VVPPNN SSeerrvveerr WWiizzaarrdd

Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set
the LAN-to-LAN profile for VPN dial in connection (from client to server) step by step.

Available settings are explained as follows:

Item Description
VPN Server Mode

Selection

Choose the direction for the VPN server.
Site to Site VPN – To set a LAN-to-LAN profile

automatically, please choose Site to Site VPN.
Remote Dial-in User –You can manage remote access by

maintaining a table of remote user profile, so that users can be
authenticated to dial-in via VPN connection.

Please choose a
LAN-to-LAN Profile

This item is available when you choose Site to Site VPN
(LAN-to-LAN) as VPN server mode. There are 32 VPN
profiles for users to set.

Vigor2920 Series User’s Guide

48

Please choose a Dial-in
User Accounts

This item is available when you choose Remote Dial-in User
(Teleworker) as VPN server mode. There are 32 VPN tunnels
for users to set.

Allowed Dial-in Type

This item is available after you choose any one of dial-in user
account profiles. Next, you have to select suitable dial-in type
for the VPN server profile. There are several types provided
here (similar to VPN Client Wizard).

Different Dial-in Type will lead to different configuration
page.

1. Here we take the example of choosing Remote-Dial-in User as the VPN Server Mode.

2. Check the Allowed Dial-in Type for the VPN server profile

3. After making the choices for the server profile, please click Next. You will see different

configurations based on the selection (dial-in type) you made.

Vigor2920 Series User’s Guide

49

 When you check PPTP, you will see the following graphic:

 When you check PPTP/IPSec/L2TP (three types) or PPTP/IPSec (two types) or L2TP

with Policy (Nice to Have/Must), you will see the following graphic:

Vigor2920 Series User’s Guide

50

 When you check IPSec, you will see the following graphic:

Available settings are explained as follows:

Item Description
Profile Name

Type a name for such profile. The length of the file is limited
to 10 characters.

User Name

This field is used to authenticate for connection when you
select PPTP or L2TP with or without IPSec policy above.

Password

This field is used to authenticate for connection when you
select PPTP or L2TP with or without IPSec policy above.

Pre-Shared Key

For IPSec/L2TP IPSec authentication, you have to type a
pre-shared key.

Confirm
Pre-Shared Key

Type the pre-shared key again for confirmation.

Digital Signature
(X.509)

Check the box of Digital Signature to invoke this function.
Use the drop down list to choose one of the certificates for

using. You have to configure one certificate at least previously
in Certificate Management >> Local Certificate. Otherwise, the
setting you choose here will not be effective.

Peer IP/VPN Client
IP

Type the WAN IP address or VPN client IP address for the
remote client.

Peer ID

Type the ID name for the remote client.

Remote Network IP

Please type one LAN IP address (according to the real location
of the remote host) for building VPN connection.

Remote Network
Mask

Please type the network mask (according to the real location of
the remote host) for building VPN connection.

Vigor2920 Series User’s Guide

51

4. After finishing the configuration, please click Next. The confirmation page will be

shown as follows.

Available settings are explained as follows:

Item Description
Go to the VPN

Connection
Management

Click this radio button to access VPN and Remote
Access>>Connection Management for viewing VPN

Connection status.

Do another VPN
Server Wizard
Setup

Click this radio button to set another profile of VPN Server
through VPN Server Wizard.

View more detailed
configuration

Click this radio button to access VPN and Remote
Access>>LAN to LAN for viewing detailed configuration.

5. If there is no problem, you can click one of the radio buttons listed on the page and click

Finish to execute the next action.

Vigor2920 Series User’s Guide

52

22..55 WWiirreelleessss WWiizzaarrdd

The wireless wizard allows you to configure settings specified for a host AP (for home use or
internal use for a company) and specified for a guest AP (for any wireless clients accessing
into Internet).

Note: This wizard is available for “n” model only.
Follow the steps listed below:

1. Open Wireless Wizard.

2. The screen of wireless wizard will be shown as follows. This page will be used for internal

users in a company or your home.

Available settings are explained as follows:

Item Description
Name

Type the SSID name of this router. The default name is
defined with DrayTek.

Mode

At present, the router can connect to 11n Only, 11g Only,
Mixed (11b+11g), Mixed (11a+11n), Mixed (11g+11n), and
Mixed (11b+11g+11n) stations simultaneously. Simply
choose Mix (11b+11g+11n) mode.

Vigor2920 Series User’s Guide

53

Channel

Means the channel of frequency of the wireless LAN. The
default channel is 6. You may switch channel if the selected
channel is under serious interference. If you have no idea of
choosing the frequency, please select Auto to let system
determine for you.

Password

The wireless mode offered by this wizard is WPA2/PSK.
The WPA encrypts each frame transmitted from the radio

using the key, which either PSK (Pre-Shared Key) entered
manually in this field below or automatically negotiated via

802.1x authentication.
Either 8~63 ASCII characters, such as 012345678(or 64

Hexadecimal digits leading by 0x, such as
“0x321253abcde…”).

Next

Click it to get into the next setting page.

Cancel

Exit the wireless wizard without saving any changes.

3. After typing the required information, click Next. The settings in the page limit the

wireless station (guest) accessing into Internet but not being allowed to share the LAN
network and VPN connection.

Available settings are explained as follows:

Item Description
Enable/Disable

Click it to enable or disable settings in this page.

Name

Type the SSID name of this router. (SSID2)

Vigor2920 Series User’s Guide

54

Password

The wireless mode offered by this wizard is WPA2/PSK.
The WPA encrypts each frame transmitted from the radio

using the key, which either PSK (Pre-Shared Key) entered
manually in this field below or automatically negotiated via

802.1x authentication.
Either 8~63 ASCII characters, such as 012345678(or 64

Hexadecimal digits leading by 0x, such as
"0x321253abcde...").

Rate Control

It controls the data transmission rate through wireless
connection.

Upload – Check Enable and type the transmitting rate for
data upload. Default value is 30,000 kbps.

Download – Type the transmitting rate for data download.
Default value is 30,000 kbps.

Next

Click it to get into the next setting page.

Cancel

Exit the wireless wizard without saving any changes.

4. After typing the required information, click Next.

5. The following page will display the configuration summary for wireless setting.

Click Finish to complete the wireless settings configuration.

Vigor2920 Series User’s Guide

55

22..66 VVooIIPP WWiizzaarrdd

Vigor router offers a quick method to configure settings for VoIP application. Follow the steps
listed below.

1. Open VoIP Wizard.

2. The screen of VoIP Wizard will be shown as follows.

Available settings are explained as follows:

Item Description
Set VoIP service

provider domain

VoIP service provider - Use the drop down list to choose

the ISP which offers the VoIP service for your router. If
you cannot find the name of your ISP, simply type it in the
right box.

SIP Port – Use the default setting (5060).

Set Account quickly

Account Number/Name – Type the account number/name

registered to your ISP.
Password – Type the password for the account registered to

your ISP.
Use the same Account as phone 1 – If you don’t need to

configure Phone 2 settings, simply check this box.

Next

Click it to get into the next setting page.

Cancel

Click it to give up the quick start wizard.

Vigor2920 Series User’s Guide

56

3. After finished the settings above, click Next for viewing summary of such connection.

4. Click Finish. A page of VoIP Wizard Setup OK!!! will appear.

22..77 RReeggiisstteerriinngg VViiggoorr RRoouutteerr

You have finished the configuration of Quick Start Wizard and you can surf the Internet at any
time. Now it is the time to register your Vigor router to MyVigor website for getting more
service. Please follow the steps below to finish the router registration.

1. Please login the web configuration interface of Vigor router by typing “admin/admin”

as User Name / Password.

2. Click Support Area>>Production Registration from the home page.

Vigor2920 Series User’s Guide

57

3. A Login page will be shown on the screen. Please type the account and password that

you created previously. And click Login.

4. The following page will be displayed after you logging in MyVigor. From this page,

please click Add or Product Registration.

Note: Below the field of Your Device List, all the Vigor routers that you have
registered to MyVigor website will be displayed in sequence.

Vigor2920 Series User’s Guide

58

5. When the following page appears, please type in Nickname (for the router) and choose

the right registration date from the popup calendar (it appears when you click on the box
of Registration Date). After adding the basic information for the router, please click
Submit.

Vigor2920 Series User’s Guide

59

6. When the following page appears, your router information has been added to the

database. Click OK to leave this web page and return to My Information web page.

7. Take a look at the page of My Information, the new added Vigor rotuer is listed under

Your Device List.

Vigor2920 Series User’s Guide

60

This page is left blank.

Vigor2920 Series User’s Guide

61

TTuuttoorriiaallss aanndd A

Apppplliiccaattiioonnss

33..11 HHooww ttoo ccoonnffiigguurree sseettttiinnggss ffoorr IIPPvv66 SSeerrvviiccee

Due to the shortage of IPv4 address, more and more countries use IPv6 to solve the problem.
However, to continually use the original rich resources of IPv4, both IPv6 and IPv4 networks
shall communicate for each other via intercommunication mechanism to complete the shifting
job from IPv4 to IPv6 gradually. At present, there are three common types of
intercommunication mechanisms:

 Dual Stack

The user can use both IPv4 and IPv6 techniques at the same time. That means adding an
IPv6 stack on the origin network layer to let the host own the communication capability
of IPv4 and IPv6.

 Tunnel

Both IPv6 hosts can be communicated for each other via existing IPv4 network
environment. The IPv6 packets will be encapsulated with the header of IPv4 first. Later,
the packets will be transformed and adjusted as IPv4 payload. Once the packets arrive
the border between IPv4 and IPv6, the header of IPv4 on the packets will be removed.
Then, the packets with IPv6 address will be forwarded to the destination of IPv6
network.

 Translation

Such feature is active only for the user who uses IPv4 to communicate with other user
using IPv4 service.

Before configuring the settings on Vigor2920, you need to know which connection type that
your IPv6 service used.

Note: For the IPv6 service, you have to configure WAN/LAN settings before using the
service.

II.. CCoonnffiigguurriinngg tthhee WWAANN SSeettttiinnggss

For the IPv6 WAN settings for Vigor2920, there are five connection types to be chosen: PPP,
TSPC, AICCU, DHCPv6 Client and Static IPv6.

1. Access into the web user interface of Vigor2920. Open WAN>> Internet Access.

Choose one of the WAN interfaces (e.g., WAN2 in this case) as the one supporting IPv6
service. Then, choose PPPoE as the Access Mode and click Details Page.

Vigor2920 Series User’s Guide

62

Note: Only one WAN interface support IPv6 service at one time. In this example,
WAN2 is chosen as the one supporting IPv6 service.

2. In the following figure, click Enable and type the required information. Click OK to save

the settings and return to previous setting page.

3. Click IPv6.

4. In the following figure, use the drop down list to choose a proper connection type.

Different connection types will bring out different configuration page. Refer to the
following:

 PPP – Dual Stack application

Choose PPP to access into the setting page for IPv6 service. It is not necessary for you to
configure anything.

Vigor2920 Series User’s Guide

63

Click OK and open Online Status. If the connection is successful, you will get the IP
address for IPv4 and IPv6 at the same time.

Vigor2920 Series User’s Guide

64

 TSPC – Tunnel application, both IPv6 hosts communicate through IPv4 network

Choose TSPC and type the information for TSPC service.

Note: While using such mode, you have to make sure the IPv4 network connection is

normal.

(In the following figure, the TSPC information is obtained from http://gogo6.com/ after
applied for the service.)

Click OK and open Online Status. If the connection is successful, the physical
connection will be shows as follows:

Vigor2920 Series User’s Guide

65

 AICCU – Tunnel application

Choose AICCU and type the information for AICCU of IPv6.

Note: While using such mode, you have to make sure the IPv4 network connection is
normal.

(In the following figure, the AICCU information is obtained from
https://www.sixxs.net/main/

after applied for the service.)

Click OK and open Online Status. If the connection is successful, the physical
connection will be shows as follows:

Vigor2920 Series User’s Guide

66

 DHCPv6 Client

Choose DHCPv6 Client. Click one of the identity associations and type the IAID
number.

Click OK and open Online Status. If the connection is successful, the physical
connection will be shows as follows:

Vigor2920 Series User’s Guide

67

 Static IPv6

Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address.

Click OK and open Online Status. If the connection is successful, the physical
connection will be shows as follows:

Vigor2920 Series User’s Guide

68

IIII.. CCoonnffiigguurriinngg tthhee LLAANN SSeettttiinnggss

After finished the WAN settings for IPv6, please configure the LAN settings to make the
router’s client getting the IPv6 address.

1. Access into the web user interface of Vigor2920. Open LAN>> General Setup. Click

the IPv6 button.

Note: Only the subnet of LAN1 supports IPv6 feature.

2. In the field of RADVD Configuration, the default setting is Enable. The client’s PC

will ask RADVD service for the Prefix of IPv6 address automatically, and generate an
Interface ID by itself to compose a full and unique IPv6 address.

3. In the field of HCPv6 Server Configuration, when DHCPv6 service is enabled, you can

assign available IPv6 address for the client manually.

Note: When both mechanisms are enabled, the client can determine which mechanism
to be used (e.g., the default mechanism for Windows7 is RADVD).

Vigor2920 Series User’s Guide

69

IIIIII.. CCoonnffiirrmmiinngg IIPPvv66 SSeerrvviiccee RRuunn SSuucccceessssffuullllyy

1. Make sure you have acquired the correct IPv6 IP address. Get into MS-DOS interface

and type the command of “ipconfig”. Refer to the following figure.

From the above figure we can see IPv6 IP address has been detected by the system.

2. Use the Ping command to ping any IPv6 address indicating an IPv6 website. For

example, www.kame.net

is a website supporting IPv4 IP and IPv6 IP services. Its IPv6

address is seen with a format of 2001:200:dff:fff1:216:3eff:feb1:44d7.

After getting the above message, it means the IPv6 service has been activated
successfully.

Vigor2920 Series User’s Guide

70

3. Connect to the website for IPv6. Open a web browser and type an URL of IPv6, e.g.,

www.kame.net

. If your computer accesses into the website by using IPv6 address, you

may see a turtle dancing on the screen. If not, only a steady turtle will be seen.

If you can see a turtle dancing on the screen, that means IPv6 service is ready for you to
access and utilize.

Vigor2920 Series User’s Guide

71

33..22 HHooww ttoo SSeenndd aa NNoottiiffiiccaattiioonn ttoo SSppeecciiffiieedd PPhhoonnee NNuummbbeerr vviiaa
SSMMSS SSeerrvviiccee iinn WWAANN DDiissccoonnnneeccttiioonn

Follow the steps listed below:

1. Log into the web user interface of Vigor router.

2. Configure relational objects first. Open Object Settings>>SMS/Mail Server Object to

get the following page.

Index 1 to Index 8 allows you to choose the built-in SMS service provider. If the SMS
service provider is not on the list, you can configure Index 9 and Index 10 to add the new
service provider to Vigor router.

3. Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider

setting. In the following page, type the username and password and set the quota that the
router can send the message out.

Vigor2920 Series User’s Guide

72

4. After finished the settings, click OK to return to previous page. Now you have finished

the configuration of the SMS Provider profile setting.

5. Open Object Settings>>Notification Object to configure the event conditions of the

notification.

6. Choose any index number (e.g., Index 1 in this case) to configure conditions for sending

the SMS. In the following page, type the name of the profile and check the Disconnected
and Reconnected boxes for WAN to work in concert with the topic of this paper.

Vigor2920 Series User’s Guide

73

7. After finished the settings, click OK to return to previous page. You have finished the

configuration of the notification object profile setting.

8. Now, open Application >> SMS / Mail Alert Service. Use the drop down list to choose

SMS Provider and the Notify Profile (specify the time of sending SMS). Then, type the
phone number in the field of Recipient (the one who will receive the SMS).

9. Click OK to save the settings. Later, if one of the WAN connections fails in your router,

the system will send out SMS to the phone number specified. If the router has only one
WAN interface, the system will send out SMS to the phone number while reconnecting
the WAN interface successfully.

Vigor2920 Series User’s Guide

74

 Remark: How the customize the SMS Provider

Choose one of the Index numbers (9 or 10) allowing you to customize the SMS Provider. In
the web page, type the URL string of the SMS provider and type the username and password.
After clicking OK, the new added SMS provider will be added and will be available for you to
specify for sending SMS out.

Vigor2920 Series User’s Guide

75

33..33 HHooww ccaann II ggeett tthhee ffiilleess ffrroomm UUSSBB ssttoorraaggee ddeevviiccee ccoonnnneeccttiinngg
ttoo VViiggoorr rroouutteerr??

1. Plug the USB device to the USB port on the router. Make sure Disk Connected appears

on the Connection Status as the figure shown below:

2. Open USB Application >> USB General Settings to check the general settings. Click

OK.

Vigor2920 Series User’s Guide

76

3. Setup a user account for the FTP service by using USB Application >>USB User

Management. Click Enable to enable FTP/Samba User account. Here we add a new
account "user1" and assign authorities “Read”, “Write” and “List” to it.

4. Click OK to save the configuration.

5. Make sure the FTP service is running properly. Please open a browser and type

ftp://192.168.1.1

. Use the account "user1" to login.

Vigor2920 Series User’s Guide

77

6. When the following screen appears, it means the FTP service is running properly.

7. Return to USB Application >> USB Disk Status. The information for FTP server will

be shown as below.

Now, users in LAN of Vigor2920 can access into the USB storage device by typing
ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending
on the Access Rule for FTP account settings in USB Application >>USB User

Management.

Vigor2920 Series User’s Guide

78

33..44 HHooww ttoo ccoonnffiigguurree MMuullttii--SSuubbnneett ffoorr VViiggoorr RRoouutteerr

There are two types of VLAN. One is Port Based VLAN; the other is Tag Based VLAN. Refer
to the following sections for learning the usage of VLAN.

II.. PPoorrtt BBaasseedd VVLLAANN

Vigor2920 can divide the physical LAN ports into several groups. For example, it can divide
the internal departments of a company into three different groups. Each group uses different
network segment. See the following graphic for an example.

Group 0 (VLAN0)(Human Resource): LAN Port 1 IP: 192.168.1.0/24
Group 1 (VLAN1)(Finance Dept): LAN Port 2 IP: 192.168.2.0/24
Group 2 (VLAN2)(Sales Dept.): LAN Port 3/Port 4 IP: 192.168.3.0/24

CCoonnffiigguurraattiioonn::

1. In the page of LAN >> VLAN Configuration, check the box of Enable to enable the

function of VLAN Configuration.

2. For VLAN0 setting, check P1 and set LAN1 as the Subnet.

3. For VLAN1 setting, check P2 and set LAN2 as the Subnet.

4. For VLAN2 setting, check P3 and P4, and set LAN3 as the Subnet.

Vigor2920 Series User’s Guide

79

5. In the page of LAN >> General Setup, check the Status box of LAN2 and LAN3 and

enable the function of DHCP.

After finishing the above configuration, the equipment connecting to Vigor2920 LAN
Port can get the corresponding IP address of the network segment.

The equipment connecting to Vigor2920 LAN Port 1 (LAN1) can get the IP address of

192.168.1.0/24
The equipment connecting to Vigor2920 LAN Port 2 (LAN2) can get the IP address of

192.168.2.0/24
The equipment connecting to Vigor2920 LAN Port 3 and Port 4 (LAN3) can get the IP

address of 192.168.3.0/24
For the detailed settings of the network segment, open LAN>>General Setup and click

Details Page. Adjust the settings for your request. Refer to the following figure.

Vigor2920 Series User’s Guide

80

6. To make any two of VLAN groups linked with each other, just check the boxes of the

ones in the field of Inter-LAN Routing in the page of LAN >> General Setup. Refer to
the following figure. LAN2 and LAN3 are linked.

Vigor2920 Series User’s Guide

81

IIII.. TTaagg BBaasseedd VVLLAANN

By identifying the tagged message, Vigor2920 can divide the LAN Port into several VLAN
groups. Such LAN port with tagged information will accept the packets only with VLAN ID
number.

For example, Vigor2920 can divide the internal departments of a company into four different
groups by using VigorSwitch 2240. Each group uses different network segment and does not
link for each other. VigorSwitch 2240 Trunk Port 23 and Vigor2920 LAN Port 4 are
connected with network cable. See the following graphic for an example.

Group 0 (VLAN0)(Human Resource): LAN Port 4 IP: 192.168.1.0/24
Group 1 (VLAN1)(Finance Dept): LAN Port 4 IP: 192.168.2.0/24
Group 2 (VLAN2)(Sales Dept.): LAN Port 4 IP: 192.168.3.0/24
Group 3 (VLAN3)(R&D): LAN Port 4 IP: 192.168.4.0/24

CCoonnffiigguurraattiioonn

1. In the page of LAN >> VLAN Configuration, check the box of Enable to enable the

function of VLAN Configuration.

2. To activate the function of VLAN Tag for VLAN0 setting, check the box of Enable and

type the value (7) for VID setting. Then check P4 and set LAN1 as the Subnet.

3. To activate the function of VLAN Tag for VLAN1 setting, check the box of Enable and

type the value (8) for VID setting. Then check P4 and set LAN2 as the Subnet.

4. To activate the function of VLAN Tag for VLAN2 setting, check the box of Enable and

type the value (9) for VID setting. Then check P4 and set LAN3 as the Subnet.

Vigor2920 Series User’s Guide

82

5. To activate the function of VLAN Tag for VLAN3 setting, check the box of Enable and

type the value (10) for VID setting. Then check P4 and set LAN4 as the Subnet.

6. In the page of LAN >> General Setup, check the Status box of LAN2, LAN3 and

LAN4 and enable the function of DHCP.

For the detailed settings of the network segment, open LAN>>General Setup and click
Details Page. Adjust the settings for your request. Refer to the following figure.

Vigor2920 Series User’s Guide

83

CCoonnffiigguurraattiioonn ffoorr VViiggoorrSSwwiittcchh 22224400::

1. Open Vlan>>Tag-based Group.

2. Add four VID groups. In this case, we can explanation it with Port 15, 16, 17, 18 and

Trunk Port 23.

VLAN Name 2920-VID7, Port Members = 15、23
VLAN Name 2920-VID8, Port Members = 16、23
VLAN Name 2920-VID9, Port Members = 17、23
VLAN Name 2920-VID10, Port Members = 18、23

3. Open Vlan>> Ports and set the VID value with role for each Port:

Port 15 VID = 7 Role = Access
Port 16 VID = 8 Role = Access
Port 17 VID = 9 Role = Access
Port 18 VID = 10 Role = Access
Port 23 VID = 1 Role = Trunk
Port 23 is set with Trunk in this example and will transfer the packets with VLAN Tag

information. That is, packets with VID 7, 8, 9 and 10 will be transferred to Vigor2920 by
Port 23 and VID information will be retained.

Vigor2920 Series User’s Guide

84

4. After finishing the above configuration, the equipment connecting to VigorSwitch Port

15, 16, 17 and 18 can get the corresponding IP address(es) of the network segment.
The equipment connecting to VigorSwitch Port 15 can get the IP address of

192.168.1.0/24
The equipment connecting to VigorSwitch Port 16 can get the IP address of

192.168.2.0/24
The equipment connecting to VigorSwitch Port 17 can get the IP address of

192.168.3.0/24
The equipment connecting to VigorSwitch Port 18 can get the IP address of

192.168.4.0/24

7. To make any two of VLAN groups of Tag Based VLAN linked with each other, just

check the boxes of the ones in the field of Inter-LAN Routing in the page of LAN >>
General Setup. Refer to the following figure. LAN2 and LAN3 are linked.

Vigor2920 Series User’s Guide

85

33..55 HHooww ttoo CCuussttoommiizzee YYoouurr LLooggiinn PPaaggee

Login page can be customized to fit the request of the administrator.

1. Open User Management>>General Setup. Set User-Based as the Mode and click OK

to save teh settings.

2. Open User Management>>User Profile to create a new user profle.

3. Click any link (e.g., #3) to access into the following page. Type a User Name and a

Password. Then, click OK.

Vigor2920 Series User’s Guide

86

4. Open System Maintenance>>Login Page Greeting. Check the box to enable this

function. Type a brief description (e.g., Just for Carrie) in the field of Login Description
which will be shown on the heading of the login dialog. Next, click OK.

Note that do not type URL redirect link in Bulletin box.

5. Open a new tab in the same browser (for IE 7.0/FireFox and above) or open a new web

browser.

6. Try to access into the web user interface (e.g., 192.168.1.1) of Vigor router. Please note

“Just for Carrie” is displayed as a heading on the login dialog box.

7. After typing the username and password (defined in User Management>>User Profile),

click Login. You can access into Internet or access into the Landing Page if configured
in User Management>>General Setup.

Vigor2920 Series User’s Guide

87

33..66 HHooww ttoo uussee SSmmaarrttMMoonniittoorr wwiitthh VViiggoorr22992200 sseerriieess

For the models that support SmartMonitor, you can connect the device installed with
SmartMonitor to the monitor port of Vigor router, then all the traffic in other LAN port will
forward to the monitor port. But, there is no hardware monitor port for Vigor2920 series.
Therefore we need to configure mirror port setting in the web user interface of Vigor2920 for
using SmartMonitor.

1. Please go to LAN > LAN Port Mirror to setup the mirror port.

2. Please enable the Port Mirror function first.

3. Select the Mirror port and Mirrored port, the traffics of mirrored ports will be forwarded

to mirror port. For example, if we select P2 as mirror port and mirrored ports are P1, P3
and P4, then P1, P3 and P4 will forward the traffic to P2.

When the LAN Port Mirror is configured correctly, just connect the PC installed with
SmartMonitor to the mirror port.

Note: Please pay attention that the mirror port will fail to get IP from Vigor2920. It means
that any computer connects to mirror port can not access Vigor2920 or Internet, and only
can be used as a “monitor” device.

Vigor2920 Series User’s Guide

88

33..77 CCrreeaattee aa LLAANN--ttoo--LLAANN CCoonnnneeccttiioonn BBeettwweeeenn RReemmoottee OOffffiiccee
aanndd HHeeaaddqquuaarrtteerr

The most common case is that you may want to connect to network securely, such as the
remote branch office and headquarter. According to the network structure as shown in the
below illustration, you may follow the steps to create a LAN-to-LAN profile. These two
networks (LANs) should NOT have the same network address.

Settings in Router A in headquarter:

1. Go to VPN and Remote Access and select Remote Access Control to enable the

necessary VPN service and click OK.

2. Then,

For using PPP based services, such as PPTP, L2TP, you have to set general settings in
PPP General Setup.

For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set
general settings in IPSec General Setup, such as the pre-shared key that both parties
have known.

Vigor2920 Series User’s Guide

89

3. Go to LAN-to-LAN. Click on one index number to edit a profile.

4. Set Common Settings as shown below. You should enable both of VPN connections

because any one of the parties may start the VPN connection.

Vigor2920 Series User’s Guide

90

5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with

the selected Dial-Out method.

If an IPSec-based service is selected, you should further specify the remote peer IP
Address, IKE Authentication Method and IPSec Security Method for this Dial-Out
connection.

If a PPP-based service is selected, you should further specify the remote peer IP Address,
Username, Password, PPP Authentication and VJ Compression for this Dial-Out
connection.