DrayTek Vigor2952 operation manual

Vigor2952 Series

Dual-WAN Security Firewall

User’s Guide

Version: 1.5

Firmware Version: V3.8.4

(For future update, please visit DrayTek web site)

Date: November 17, 2016

Vigor2952 Series User’s Guide

Copyrights

© All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.

Trademarks

The following trademarks are used in this document:

 Microsoft is a registered trademark of Microsoft Corp.  Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are trademarks of Microsoft Corp.  Apple and Mac OS are registered trademarks of Apple Inc.  Other products may be trademarks or registered trademarks of their respective manufacturers.

Safety Instructions



Read the installation guide thoroughly before you set up the router.

 The router is a complicated electronic unit that may be repaired only be authorized and qualified personnel.

Do not try to open or repair the router yourself.

 Do not place the router in a damp or humid place, e.g. a bathroom.  The router should be used in a sheltered area, within a temperature range of +5 to +40 Celsius.  Do not expose the router to direct sunlight or other heat sources. The housing and electronic components

may be damaged by direct sunlight or heat sources.

 Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards.  Keep the package out of reach of children.  When you want to dispose of the router, please follow local regulations on conservation of the environment.

Warranty

 We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship

or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.

Be a Registered Owner

 Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com.

Firmware & Tools Updates

 Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult

the DrayTek web site for more information on newest firmware, tools and documents.

http://www.DrayTek.com

Vigor2952 Series User’s Guide

iii

European Community Declarations

Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, Hukou Township, Hsinchu Industrial Park, Hsinchu County, Taiwan 303 Product: Vigor2952 Series Router DrayTek Corp. declares that Vigor2952 Series of routers are in compliance with the following essential

requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/ EC by

complying with the requirements set forth in EN55022/Class A and EN55024/Class A. The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the

requirements set forth in EN60950-1. This product is designed for 2.4GHz WLAN network throughout the EC region.

Regulatory Information

Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part

15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) This device may accept any interference received, including interference that may cause undesired operation. Any changes or modifications not expressly approved by the party responsible for compliance could void the user's

authority to operate this equipment. This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This

equipment should be installed and operated with minimum distance 20cm between the radiator & your body.

More update, please visit www.draytek.com.

Vigor2952 Series User’s Guide

TTaabbllee ooff CCoonntteennttss

Part I Installation................................................................................................................1

I-1 Introduction ................................................................................................................................... 2

I-1-1 Indicators and Connectors .................................................................................................. 4

I-2 Hardware Installation .................................................................................................................... 7

I-2-1 Installing Vigor Router......................................................................................................... 7

I-2-2 Wall-Mounted Installation of Vigor Router........................................................................... 8

I-2-3 Installing USB Printer to Vigor Router................................................................................. 9

I-3 Accessing Web Page.................................................................................................................. 17

I-4 Changing Password.................................................................................................................... 19

I-5 Dashboard................................................................................................................................... 20

I-5-1 Virtual Panel...................................................................................................................... 20

I-5-2 Name with a Link............................................................................................................... 21

I-5-3 Quick Access for Common Used Menu ............................................................................ 22

I-5-4 GUI Map ............................................................................................................................ 23

I-5-5 Web Console..................................................................................................................... 24

I-5-6 Config Backup................................................................................................................... 25

I-5-7 Logout................................................................................................................................ 25

I-5-8 Online Status.....................................................................................................................26

I-5-8-1 Physical Connection......................................................................26

I-5-8-2 Virtual WAN ...............................................................................28

I-6 Quick Start Wizard...................................................................................................................... 29

I-6-1 WAN1 (Fiber) / WAN1/2(Ethernet) / WAN3/4(USB).......................................................... 30

I-6-2 WAN3 / WAN4 (USB)........................................................................................................ 39

I-7 Service Activation Wizard........................................................................................................... 41

I-8 Registering Vigor Router............................................................................................................. 44

Part II Connectivity ..........................................................................................................47

II-1 WAN........................................................................................................................................... 48

Web User Interface.................................................................................................................... 50

II-1-1 General Setup .................................................................................................................. 50

II-1-1-1 WAN1 (Fiber/AUTO).....................................................................51

II-1-1-2 WAN2 (Ethernet).........................................................................53

II-1-1-3 WAN3 / WAN4 (USB).....................................................................54

II-1-2 Internet Access................................................................................................................. 56

II-1-2-1 Details Page for PPPoE in Etherenet WAN1/WAN2 and Fiber WAN1.............58

II-1-2-2 Details Page for Static or Dynamic IP in Etherenet WAN1/WAN2 and Fiber WAN1

.......................................................................................................60

II-1-2-3 Details Page for PPTP/L2TP in Etherenet WAN1/WAN2 and Fiber WAN1.......65

II-1-2-4 Details Page for 3G/4G USB Modem (PPP mode) in USB WAN3/WAN4 ..........67

II-1-2-5 Details Page for 3G/4G USB Modem (DHCP mode) in USB WAN3/WAN4........69

II-1-2-6 Details Page for IPv6 – Offline in WAN1/WAN2/WAN3/WAN4....................71

II-1-2-7 Details Page for IPv6 – PPP in WAN1/WAN2 .........................................71

II-1-2-8 Details Page for IPv6 – TSPC in WAN1/WAN2/WAN3/WAN4.......................72

II-1-2-9 Details Page for IPv6 – AICCU in WAN1/WAN2/WAN3/WAN4 .....................74

Vigor2952 Series User’s Guide

II-1-2-10 Details Page for IPv6 – DHCPv6 Client in WAN1/WAN2...........................76

II-1-2-11 Details Page for IPv6 – Static IPv6 in in WAN1/WAN2 ............................78

II-1-2-12 Details Page for IPv6 – 6in4 Static Tunnel in WAN1 / WAN2 ....................79

II-1-2-13 Details Page for IPv6 – 6rd in WAN1 / WAN2.......................................81

II-1-3 Multi-VLAN ....................................................................................................................... 83

II-1-4 WAN Budget..................................................................................................................... 88

II-1-4-1 General Setup ............................................................................88

II-1-4-2 Status ......................................................................................90

Application Notes....................................................................................................................... 91

A-1 How to configure settings for IPv6 Service in Vigor2952...............................91

II-2 LAN.......................................................................................................................................... 104

Web User Interface..................................................................................................................106

II-2-1 General Setup ................................................................................................................ 106

II-2-1-1 Details Page for LAN1 – Ethernet TCP/IP and DHCP Setup...................... 109

II-2-1-2 Details Page for LAN1~ LAN4 – IPv6 Setup......................................... 111

II-2-1-3 Details Page for LAN2 ~ LAN8........................................................ 115

II-2-1-4 Details Page for IP Routed Subnet .................................................. 116

II-2-2 VLAN.............................................................................................................................. 118

II-2-3 Bind IP to MAC............................................................................................................... 121

II-2-4 LAN Port Mirror............................................................................................................... 123

II-2-5 Wired 802.1x .................................................................................................................. 124

II-2-6 Web Portal Setup ........................................................................................................... 125

II-2-7 PPPoE Server ................................................................................................................ 128

II-2-8 PoE................................................................................................................................. 129

II-2-8-1 General Setup .......................................................................... 129

II-2-8-2 Device Check............................................................................ 130

II-2-8-3 Status .................................................................................... 131

II-3 NAT .......................................................................................................................................... 133

Web User Interface..................................................................................................................134

II-3-1 Port Redirection.............................................................................................................. 134

II-3-2 DMZ Host ....................................................................................................................... 138

II-3-3 Open Ports ..................................................................................................................... 141

II-3-4 Port Triggering................................................................................................................ 143

II-4 Applications.............................................................................................................................. 146

Web User Interface..................................................................................................................148

II-4-1 Dynamic DNS................................................................................................................. 148

II-4-2 LAN DNS / DNS Forwarding.......................................................................................... 151

II-4-3 DNS Security..................................................................................................................154

II-4-3-1 General Setup .......................................................................... 154

II-4-3-2 Domain Diagnose....................................................................... 155

II-4-4 Schedule......................................................................................................................... 156

II-4-5 RADIUS/TACACS+........................................................................................................ 158

II-4-5-1 External RADIUS........................................................................ 158

II-4-5-2 Internal RADIUS ........................................................................ 159

II-4-5-3 External TACACS+...................................................................... 161

II-4-6 Active Directory/ LDAP................................................................................................... 162

Vigor2952 Series User’s Guide

II-4-7 UPnP.............................................................................................................................. 165

II-4-8 IGMP............................................................................................................................... 166

II-4-9 Wake on LAN ................................................................................................................. 167

II-4-10 SMS / Mail Alert Service............................................................................................... 168

II-4-11 Bonjour......................................................................................................................... 170

II-4-12 High Availability............................................................................................................ 173

II-4-12-1 General Setup......................................................................... 175

II-4-12-2 Config Sync ............................................................................ 177

II-4-13 Local 802.1X General Setup........................................................................................ 179

Application Notes.....................................................................................................................181

A-1 How to Implement the LDAP/AD Authentication for User Management? ......... 181

II-5 Routing..................................................................................................................................... 184

Web User Interface..................................................................................................................185

II-5-1 Static Route.................................................................................................................... 185

II-5-2 Load-Balance /Route Policy........................................................................................... 189

II-5-2-1 General Setup .......................................................................... 189

II-5-2-2 Diagnose................................................................................. 194

Application Notes.....................................................................................................................196

A-1 How to Customize a Secure Route between VPN Router and Remote Router by Using

Route Policy ...................................................................................... 196

A-2 How to Setup Address Mapping........................................................... 199

A-3 How to setup Load Balance for Packets?................................................ 203

II-6 Hardware Acceleration............................................................................................................. 205

Web User Interface..................................................................................................................205

II-6-1 Setup .............................................................................................................................. 205

Part III Wireless LAN ......................................................................................................207

III-1 Wireless LAN .......................................................................................................................... 208

Web User Interface..................................................................................................................211

III-1-1 Wireless Wizard............................................................................................................. 211

III-1-2 General Setup ............................................................................................................... 214

III-1-3 Security.......................................................................................................................... 216

III-1-4 Access Control .............................................................................................................. 218

III-1-5 WPS............................................................................................................................... 219

III-1-6 WDS .............................................................................................................................. 222

III-1-7 Advanced Setting .......................................................................................................... 225

III-1-8 AP Discovery................................................................................................................. 228

III-1-9 Station List..................................................................................................................... 229

III-1-10 Station Control............................................................................................................. 230

III-1-11 Bandwidth Management.............................................................................................. 231

Part IV VPN.....................................................................................................................233

IV-1 VPN and Remote Access....................................................................................................... 234

Web User Interface..................................................................................................................235

Vigor2952 Series User’s Guide

vii

IV-1-1 VPN Client Wizard ........................................................................................................ 235

IV-1-2 VPN Server Wizard....................................................................................................... 242

IV-1-3 Remote Access Control ................................................................................................ 246

IV-1-4 PPP General Setup....................................................................................................... 247

IV-1-5 IPsec General Setup..................................................................................................... 249

IV-1-6 IPsec Peer Identity........................................................................................................ 250

IV-1-7 Remote Dial-in User...................................................................................................... 252

IV-1-8 LAN to LAN................................................................................................................... 255

IV-1-9 VPN Trunk Management .............................................................................................. 265

IV-1-10 Connection Management............................................................................................ 274

Application Notes.....................................................................................................................276

A-1 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec

Tunnel (Main Mode)............................................................................. 276

IV-2 SSL VPN................................................................................................................................. 281

Web User Interface..................................................................................................................282

IV-2-1 General Setup............................................................................................................... 282

IV-2-2 SSL Web Proxy............................................................................................................. 283

IV-2-3 SSL Application............................................................................................................. 285

IV-2-4 User Account................................................................................................................. 287

IV-2-5 User Group.................................................................................................................... 291

IV-2-6 Online User Status........................................................................................................ 293

IV-3 Certificate Management..........................................................................................................294

Web User Interface..................................................................................................................295

IV-3-1 Local Certificate ............................................................................................................ 295

IV-3-2 Trusted CA Certificate................................................................................................... 299

IV-3-3 Certificate Backup......................................................................................................... 301

Part V Security...............................................................................................................303

V-1 Firewall.....................................................................................................................................304

Web User Interface..................................................................................................................306

V-1-1 General Setup................................................................................................................ 306

V-1-2 Filter Setup..................................................................................................................... 311

V-1-3 DoS Defense.................................................................................................................. 322

V-1-4 Diagnose........................................................................................................................ 326

Application Notes.....................................................................................................................329

A-1 How to Configure Certain Computers Accessing to Internet........................ 329

V-2 Central Security Management (CSM)...................................................................................... 333

Web User Interface..................................................................................................................334

V-2-1 APP Enforcement Profile ............................................................................................... 334

V-2-2 APPE Signature Upgrade.............................................................................................. 336

V-2-3 URL Content Filter Profile.............................................................................................. 337

V-2-4 Web Content Filter Profile.............................................................................................. 341

viii

Vigor2952 Series User’s Guide

V-2-5 DNS Filter Profile ........................................................................................................... 345

Application Notes.....................................................................................................................347

A-1 How to Create an Account for MyVigor ................................................. 347

A-2 How to Block Facebook Service Accessed by the Use rs via W e b Cont ent Fil ter / UR L

Content Filter.................................................................................... 355

Part VI Management ......................................................................................................361

VI-1 System Maintenance.............................................................................................................. 362

Web User Interface..................................................................................................................363

VI-1-1 System Status...............................................................................................................363

VI-1-2 TR-069 .......................................................................................................................... 365

VI-1-3 Admininstrator Password.............................................................................................. 367

VI-1-4 User Password.............................................................................................................. 369

VI-1-5 Login Page Greeting..................................................................................................... 372

VI-1-6 Configuration Backup.................................................................................................... 374

VI-1-7 SysLog/Mail Alert.......................................................................................................... 376

VI-1-8 Time and Date............................................................................................................... 379

VI-1-9 SNMP............................................................................................................................ 380

VI-1-10 Management............................................................................................................... 382

VII-1-11 Self-Signed Certificate ............................................................................................... 386

VI-1-12 Reboot System............................................................................................................ 388

VI-1-13 Firmware Upgrade ...................................................................................................... 389

VI-1-14 Activation..................................................................................................................... 390

VI-1-15 Internal Service User List............................................................................................ 391

VI-2 Bandwidth Management......................................................................................................... 393

Web User Interface..................................................................................................................395

VI-2-1 Sessions Limit...............................................................................................................395

VI-2-2 Bandwidth Limit............................................................................................................. 397

VI-2-3 Quality of Service.......................................................................................................... 399

VI-2-4 APP QoS....................................................................................................................... 406

Application Notes.....................................................................................................................408

A-1 How to Optimize the Bandwidth through QoS Technology .......................... 408

A-2 QoS Setting Example....................................................................... 412

VI-3 User Management.................................................................................................................. 417

Web User Interface..................................................................................................................418

VI-3-1 General Setup............................................................................................................... 418

VI-3-2 User Profile ................................................................................................................... 420

VI-3-3 User Group.................................................................................................................... 425

VI-3-4 User Online Status........................................................................................................ 426

VI-3-5 PPPoE User Online Status........................................................................................... 427

Application Notes.....................................................................................................................428

A-1 How to authenticate clients via User Management................................... 428

A-2 How to use Landing Page Feature ....................................................... 437

Vigor2952 Series User’s Guide

Application Notes.....................................................................................................................443

A-1 How to create Facebook APP for Web Portal Authentication?...................... 443

A-2 How to create Google APP for Web Portal Authentication?......................... 449

VI-4 Central Management (VPN)................................................................................................... 451

Web User Interface..................................................................................................................452

VI-4-1 General Setup............................................................................................................... 452

VI-4-1-1 General Settings....................................................................... 452

VI-4-1-2 IPsec VPN Settings .................................................................... 453

VI-4-2 CPE Management......................................................................................................... 454

VI-4-2-1 Managed Device List.................................................................. 454

VI-4-2-2 CPE Maintenance...................................................................... 456

VI-4-2-3 Google Map............................................................................. 459

VI-4-3 VPN Management......................................................................................................... 460

VI-4-4 Log & Alert .................................................................................................................... 461

Application Notes.....................................................................................................................462

A-1 CVM Application - How to manage the CPE (router) through Vigor2952 Series?. 462 A-2 CVM Application - How to build the VPN between remote devices and Vigor 2952

Series?............................................................................................. 466

A-3 CVM Application - How to upgrade CPE firmware through Vigor2952 Series?.... 468

VI-5 Central Management (AP)...................................................................................................... 471

Web User Interface..................................................................................................................472

VI-5-1 Dashboard..................................................................................................................... 472

VI-5-2 Status............................................................................................................................ 473

VI-5-3 WLAN Profile................................................................................................................. 474

VI-5-4 AP Maintenance............................................................................................................ 479

VI-5-5 AP Map ......................................................................................................................... 480

VI-5-6 Traffic Graph................................................................................................................. 483

VI-5-7 Temperature Sensor..................................................................................................... 484

VI-5-8 Event Log......................................................................................................................484

VI-5-9 Total Traffic................................................................................................................... 485

VI-5-10 Station Number........................................................................................................... 485

VI-5-11 Load Balance.............................................................................................................. 486

VI-5-12 Function Support List.................................................................................................. 487

Application Notes.....................................................................................................................488

A-1 How to use AP Management function (in Vigor2952) to check AP status and deploy

WLAN profile..................................................................................... 488

VI-6 Central Management (Switch)................................................................................................ 492

VI-6-1 Status............................................................................................................................ 492

VI-6-1-1 Switch Status .......................................................................... 492

VI-6-1-2 Switch Hierarchy...................................................................... 494

VI-6-2 Profile............................................................................................................................ 495

VI-6-3 Group ............................................................................................................................ 498

VI-6-4 Maintenance.................................................................................................................. 500

VI-6-5 Support List................................................................................................................... 501

VI-7 Central Management (External Devices) ............................................................................... 502

Vigor2952 Series User’s Guide

Part VII Others................................................................................................................503

VII-1 Objects Settings..................................................................................................................... 504

Web User Interface..................................................................................................................505

VII-1-1 IP Object ...................................................................................................................... 505

VII-1-2 IP Group....................................................................................................................... 509

VII-1-3 IPv6 Object................................................................................................................... 510

VII-1-4 IPv6 Group...................................................................................................................512

VII-1-5 Service Type Object..................................................................................................... 514

VII-1-6 Service Type Group..................................................................................................... 516

VII-1-7 Keyword Object............................................................................................................ 518

VII-1-8 Keyword Group............................................................................................................ 520

VII-1-9 File Extension Object................................................................................................... 521

VII-1-10 SMS/Mail Service Object........................................................................................... 523

VII-1-11 Notification Object...................................................................................................... 528

VII-1-12 String Object .............................................................................................................. 530

Application Notes.....................................................................................................................531

A-1 How to Send a Notification to Specified Phone Number via SMS Service in WAN

Disconnection .................................................................................... 531

VII-2 USB Application..................................................................................................................... 535

Web User Interface..................................................................................................................536

VII-2-1 USB General Settings.................................................................................................. 536

VII-2-2 USB User Management............................................................................................... 537

VII-2-3 File Explorer................................................................................................................. 539

VII-2-4 USB Device Status....................................................................................................... 540

VIII-2-5 Temperature Sensor................................................................................................... 541

VII-2-6 Modem Support List..................................................................................................... 543

VII-2-7 SMB Client Support List............................................................................................... 544

Application Notes.....................................................................................................................545

A-1 How can I get the files from USB storage device connecting to Vigor router? ... 545

Part VIII Troubleshooting ..............................................................................................549

VIII-1Diagnostics............................................................................................................................ 550

Web User Interface..................................................................................................................551

VIII-1-1 Dial-out Triggering....................................................................................................... 551

VIII-1-2 Routing Table.............................................................................................................. 552

VIII-1-3 ARP Cache Table ....................................................................................................... 553

VIII-1-4 IPv6 Neighbour Table ................................................................................................. 554

VIII-1-5 DHCP Table................................................................................................................ 555

VIII-1-6 NAT Sessions Table ................................................................................................... 556

VIII-1-7 DNS Cache Table....................................................................................................... 557

VIII-1-8 Ping Diagnosis............................................................................................................ 558

VIII-1-9 Data Flow Monitor....................................................................................................... 560

Vigor2952 Series User’s Guide

xii

VIII-1-10 Traffic Graph............................................................................................................. 562

VIII-1-11 Trace Route .............................................................................................................. 563

VIII-1-12 Syslog Explorer......................................................................................................... 564

VIII-1-13 IPv6 TSPC Status..................................................................................................... 565

VIII-1-14 High Availability Status ............................................................................................. 566

VIII-1-15 Authentication Information........................................................................................ 568

VIII-1-16 DoS Flood Table....................................................................................................... 569

VIII-2 Checking If the Hardware Status Is OK or Not..................................................................... 571

VIII-3 Checking If the Network Connection Settings on Your Computer Is OK or Not................... 572

VIII-4 Pinging the Router from Your Computer .............................................................................. 575

VIII-5 Checking If the ISP Settings are OK or Not ......................................................................... 577

VIII-6 Problems for 3G/4G Network Connection............................................................................ 578

VIII-7 Backing to Factory Default Setting If Necessary.................................................................. 579

VIII-8 Contacting DrayTek .............................................................................................................. 580

Appendix I: VLAN Applications on Vigor Router ............................................................................ 581

Part IX DrayTek Tools....................................................................................................589

IX-1 SmartVPN Client..................................................................................................................... 590

IX-1-1 DrayTek Android-based SmartVPN APP for the establishment of SSL VPN connection

................................................................................................................................................. 590

IX-1-2 How to Use SmartVPN Android APP to Establish SSL VPN Tunnel?.......................... 591

Part X Telnet Commands...............................................................................................595

Accessing Telnet of Vigor2952....................................................................................................... 596

Index ...............................................................................................................................791

Vigor2952 Series User’s Guide

Paarrtt II II

nssttaallllaattii

This part will introduce Vigor router and guide to install the device in hardware and software.

Vigor2952 Series User’s Guide

II--11 IInnttrroodduuccttiioonn

TThhiiss iiss aa ggeenneerriicc IInntteerrnnaattiioonnaall vveerrssiioonn ooff tthhee uusseerr gguuiiddee.. SSppeecciiffiiccaattiioonn,, ccoommppaattiibbiilliittyy aanndd ffeeaattuurreess vvaarryy bbyy rreeggiioonn.. FFoorr ssppeecciiffiicc uusseerr gguuiiddeess ssuuiittaabbllee ffoorr yyoouurr rreeggiioonn oorr pprroodduucctt,, pplleeaassee ccoonnttaacctt llooccaall ddiissttrriibbuuttoorr..

Vigor2952 Series, a broadband router, integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth.

By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly and offers several proto cols (such as IPSec/PPTP/L2TP) with up to 100 VPN tunnels.

The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set firewall policy easily. CSM (Content Security Management) provides users control and management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before. By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security outside and control inside.

Vigor2952 Series User’s Guide

In addition, Vigor2952 Series supports USB interface for connecting USB printer to share printer, USB storage device for sharing files, or for 3G/4 G WAN.

The LAN ports of Vigor2952P and Vigor2952Pn allow power to be supplied to end devices, such as Wireless Access Points, IP Phones and IP cams, directly through the existing LAN cables, eliminating costs for additional AC wiring and redu cing installation cost. PoE connection frees your wireless AP deployment from the restriction due to power outlet location. By supplying the power end-span, you can centralize power distribution and backup without the need to increase infrastructure.

Vigor2952 Series User’s Guide

II--11--11 IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss

Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.

LED Status Explanation

Blinking The router is powered on and running normally. ACT (Activity) Off The router is powered off. On A USB device is connected and active. USB1~USB2 Blinking The data is transmitting. On No fiber line connected. SFP Off File line connected. On The WAN connection is ready. WAN1~WAN2

Blinking It will blink while transmitting data. QoS On The QoS function is active. WLAN

CSM On The profile of CSM (Content Security Management) for

On Wireless access point is ready.

Blinking Ethernet packets are transmitting over wireless LAN.

Off The WLAN function is inactive.

IM/P2P application is enabled from Firewall >> General Setup. (Such profile is established under CSM menu).

On Power sourcing equipment for PoE is enabled. PoE

Off Power sourcing equipment for PoE is disabled.

VPN

LED on Connector

WAN1 or Fiber

WAN

Left LED (Green)

Right LED

On VPN tunnel is up and down.

Off VPN services are disabled.

Blinking Traffic is passing through VPN tunnel.

On The port is connected.

Off The port is disconnected.

Blinking The data is transmitting through WAN1 or Fiber WAN.

On The WAN1/Fiber port is connected with 1000Mbps.

Vigor2952 Series User’s Guide

WAN2

LAN1~ LAN4

(Green)

Left LED

(Green)

Right LED

(Green)

Left LED

(Green)

Right LED

(Green)

Off The WAN1/Fiber port is connected with 10/100Mbps.

On The port is connected.

Off The port is disconnected.

Blinking The data is transmitting.

On The port is connected with 1000Mbps.

Off The port is connected with 10/100Mbps.

On The port is connected.

Off The port is disconnected.

Blinking The data is transmitting.

On The port is connected with 1000Mbps.

Off The port is connected with 10/100Mbps.

Vigor2952 Series User’s Guide

Interface Description

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is

blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration.

Wireless LAN ON/OFF/WPS

WLAN On - Press the button and release it within 2 seconds. When the wireless function is ready, the green LED will be on.

WLAN Off - Press the button and release it within 2 seconds to turn off the WLAN function. When the wireless function is not ready, the LED will be off.

WPS - When WPS function is enabled by web user interface, press this button for mor e t h a n 2 seconds to wait for cl ient’s device m aki ng network connection through WPS.

Fiber Connector for accessing the Internet. WAN1~WAN2 Connector for remote networked devices. LAN1~LAN4 Connectors for local networked devices. USB1~USB2 Connector for a USB device (for 3G/4G USB Modem or printer). PWR Connector for a power cord.

ON/OFF

Power Switch.

Note 1

Vigor router will use either Fiber WAN or WAN1 for Internet connection. If both Fiber WAN and WAN1 are connected at the same time, Fiber WAN will be the first choice.

Note 2

The PoE Power budget is up to 60W.

Vigor2952 Series User’s Guide

II--22 HHaarrddwwaarree IInnssttaallllaattiioonn

II--22--11 IInnssttaalllliinngg VViiggoorr RRoouutteerr

Before starting to configure the router, you have to connect your devices correctly.

1. Connect a cable Modem/DSL Modem/Media Converter (depends on your requirement) to any WAN port of router with Ethernet cable (RJ-45). Or, connect the fiber cable to the WAN (SFP) port of router.

2. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router and the other end of the cable (RJ-45) into the Ethernet port on your computer (that device also can connect to other computers to form a small area network).

3. Connect the power cord to the router’s power port on the rear panel, and the other side into a wall outlet.

4. Power on the device by pressing down the power switch on the rear panel.

5. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. The WAN1/WAN2/LAN connector LED (Left or Right) will light up according to the network card feature (1000 or 100) of the device that it connected.

If Fiber connection is used, check if SFP LED lights up or not. (For the detailed information of LED status, please refer to section I-1-1 Indicators and

Connectors.)

Vigor2952 Series User’s Guide

II--22--22 WWaallll--MMoouunntteedd IInnssttaallllaattiioonn ooff VViiggoorr RRoouutteerr

Vigor can be mounted on the wall by using standard brackets shown below.

Choose a flat surface (on the wall) which is suitable for placing the router. Make the screw holes on the short side of the bracket aim at the screw holes on the router. Next, fasten both the bracket and the router with two screws; and fasten both the wall and the bracket with another two screws. Refer to the following figure.

Then, continue to fasten the screws on the other side of the router and the wall with other screws.

When you finished above procedure, the router has been mounted on the wall firmly.

Vigor2952 Series User’s Guide

II--22--33 IInnssttaalllliinngg UUSSBB PPrriinntteerr ttoo VViiggoorr RRoouutteerr

You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com.

Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).

1. Connect the printer with the router through USB/parallel port.

2. Open All Programs>>Getting Started>>Devices and Printers.

3. Click Add a printer.

Vigor2952 Series User’s Guide

4. A dialog will appear. Click Add a local printer and click Next.

5. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next.

Vigor2952 Series User’s Guide

6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next.

7. Click Standard and choose Generic Network Card.

Vigor2952 Series User’s Guide

8. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next.

9. Type a name for the chosen printer. Click Next.

Vigor2952 Series User’s Guide

10. Choose Do not share this printer and click Next.

11. Then, in the following dialog, click Finish.

Vigor2952 Series User’s Guide

12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties.

13. Edit the property of the new printer you have added by clicking Configure Port.

Vigor2952 Series User’s Guide

14. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name.

Vigor2952 Series User’s Guide

The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router.

Info

Note 1: Some printers with the fax/scanning or other additional functions are not supported. If

you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes; find out the link of USB>>Printer Server and click it.

Then, click the What types of printers are compatible with Vigor router? link.

Note 2: Vigor router supports printing request from computers via LAN ports but not WAN port.

Vigor2952 Series User’s Guide

II--33 AAcccceessssiinngg WWeebb PPaaggee

1. Make sure your PC connects to the router correctly. You may either simply set up your computer to get IP dynamically from the router or set

up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section - Trouble Shooting of the guide.

2. Open a web browser on your PC and type http://192.168.1.1. The following window

will be open to ask for username and password.

3. Please type “admin/admin” as the Username/Password and click Login.

Info

If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem.

Vigor2952 Series User’s Guide

4. Now, the Main Screen will appear.

Info

The home page will be different slightly in accordance with the type of the router you have.

5. The web page can be logged out according to the chosen condition. The default setting

is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity.

Vigor2952 Series User’s Guide

+ 781 hidden pages