Draytek Vigor2960 Series User Manual

Download

Page 1

Page 2

Vigor2960 Series User’s Guide

Vigor2960

Dual-WAN Security Firewall

User’s Guide

Version: 1.3

Firmware Version: V1.0.9

(For future update, please visit DrayTek web site for further information)

Date: October 29, 2014

Page 3

Vigor2960 Series User’s Guide

iii

© 2014 All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.

Trademarks

The following trademarks are used in this document:

 Microsoft is a registered trademark of Microsoft Corp.  Windows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are

trademarks of Microsoft Corp.

 Apple and Mac OS are registered trademarks of Apple Inc.  Other products may be trademarks or registered trademarks of their respective

manufacturers.

Safety Instructions and Approval

Safety Instructions

 Read the installation guide thoroughly before you set up the router.  The router is a complicated electronic unit that may be repaired only be

authorized and qualified personnel. Do not try to open or repair the router yourself.

 Do not place the router in a damp or humid place, e.g. a bathroom.  The router should be used in a sheltered area, within a temperature range of +5 to

+40 Celsius.

 Do not expose the router to direct sunlight or other heat sources. The housing and

electronic components may be damaged by direct sunlight or heat sources.

 Do not deploy the cable for LAN connection outdoor to prevent electronic shock

hazards.

 Keep the package out of reach of children.  When you want to dispose of the router, please follow local regulations on

conservation of the environment.

Warranty

We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, dam aged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to revi se the m anual and onli ne documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.

Be a Registered Owner

Web registration is preferred. You can register your Vigor router via http://www.draytek.com.

Firmware & Tools Updates

Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.

http://www.draytek.com

Page 4

Vigor2960 Series User’s Guide

European Community Declarations

Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu County, Taiwan

303

Product: Vigor2960 DrayTek Corp. declares that Vigor2960 of routers are in compliance with the following essential requirements

and other relevant provisions of EC, Directive 2004/108/EC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by

complying with the requirements set forth in EN55022/Class A and EN55024/Class A. The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the

requirements set forth in EN60950-1.

Regulatory Information

Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part

15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or televisio n recept i on , whi ch can be determined by turning the equipment of f and on, the user is encouraged to try to correct the interference by one of the following measures:

 Reorient or relocate the receiving antenna.  Increase the separation between the equipment and receiver.  Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.  Consult the dealer or an experienced radio/TV technician for help.

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) This device may accept any interference received, including interference that may cause undesired operation.

More update, please visit www.draytek.com.

Page 5

Vigor2960 Series User’s Guide

Table of Contents

Chapter 1: Introduction.....................................................................................................1

1.1 Web Configuration Buttons Explanation...................................................................................... 1

1.2 LED Indicators and Connectors................................................................................................... 2

1.3 Hardware Installation.................................................................................................................... 5

1.3.1 Network Connection ................................................................................................................5

1.3.2 Wall-Mounted Installation........................................................................................................6

Chapter 2: Initial Configuration ........................................................................................7

2.1 Changing Password..................................................................................................................... 7

2.2 Quick Start Wizard........................................................................................................................ 9

2.2.1 Step 1 – Specifying the WAN Profile.......................................................................................9

2.2.2 Step 2 - Configuring the Selected Protocol...........................................................................10

2.3 Register Vigor Router................................................................................................................. 17

Chapter 3: Application and Tutorial................................................................................21

3.1 How to Build SSL VPN with RDP Service in the Browser via Logging in Router's HTTPS Server?

.......................................................................................................................................................... 21

3.2 How to Configure OSPF?........................................................................................................... 26

3.3 How to Configure LAN to LAN IPsec Tunnel between Vigor2960 and Other Router................ 33

3.4 CVM Application - How to manage the CPE (router) thro ugh Vigor2960?................................ 36

3.5 CVM Application - How to build the VPN between remote devices and Vigor2960? ................ 41

3.6 CVM Application - How to upgrade CPE firmware through Vigor2960?.................................... 44

3.7 How to use High Availability for Vigor routers?.......................................................................... 50

3.8 How to Configure DNS Inbound Load Balance on Vigor 2960?................................................ 55

Chapter 4: Advanced Configuration...............................................................................59

4.1 WAN...........................................................................................................................................59

4.1.1 General Setup........................................................................................................................60

4.1.2 Inbound Load Balance...........................................................................................................81

4.1.3 Switch ...............................................................................................................................86

4.2 LAN ............................................................................................................................................ 90

4.2.1 General Setup........................................................................................................................90

4.2.2 PPPoE Server......................................................................................................................103

4.2.3 Switch .............................................................................................................................108

4.2.4 Bind IP to MAC....................................................................................................................114

4.2.5 LAN DNS 117

4.3 Routing..................................................................................................................................... 120

4.3.1 Load Balance Pool...............................................................................................................120

4.3.2 Static Route.........................................................................................................................124

4.3.3 Policy Route.........................................................................................................................130

4.3.4 Default Route.......................................................................................................................145

4.3.5 RIP Configuration ................................................................................................................146

Page 6

Vigor2960 Series User’s Guide

4.3.6 OSPF Configuration.............................................................................................................148

4.3.7 BGP Configuration...............................................................................................................150

4.4 NAT........................................................................................................................................... 155

4.4.1 Port Redirection...................................................................................................................155

4.4.2 DMZ Host .............................................................................................................................159

4.4.3 ALG .............................................................................................................................162

4.5 Firewall..................................................................................................................................... 164

4.5.1 Filter Setup ..........................................................................................................................164

4.5.2 DoS Defense .......................................................................................................................190

4.5.3 MAC Block...........................................................................................................................193

4.6 Objects Setting......................................................................................................................... 195

4.6.1 IP Object .............................................................................................................................196

4.6.2 IP Group .............................................................................................................................198

4.6.3 IPv6 Object..........................................................................................................................200

4.6.4 Country Object.....................................................................................................................202

4.6.5 Service Type Object ............................................................................................................204

4.6.6 Service Type Group.............................................................................................................206

4.6.7 Keyword /DNS Object..........................................................................................................208

4.6.8 File Extension Object...........................................................................................................211

4.6.9 APP Object..........................................................................................................................214

4.6.10 Web Category Object ........................................................................................................218

4.6.11 QQ Object..........................................................................................................................221

4.6.12 QQ Group..........................................................................................................................223

4.6.13 Time Object .......................................................................................................................225

4.6.14 Time Group........................................................................................................................227

4.6.15 SMS Service Object...........................................................................................................229

4.6.16 Mail Service Object............................................................................................................231

4.6.17 Notification Object..............................................................................................................234

4.7 User Management.................................................................................................................... 236

4.7.1 Web Portal............................................................................................................... ............236

4.7.2 User Profile..........................................................................................................................241

4.7.3 User Group..........................................................................................................................254

4.7.4 Guest Profile........................................................................................................................256

4.7.5 RADIUS .............................................................................................................................262

4.7.6 LDAP/Active Directory.........................................................................................................263

4.8 Application................................................................................................................................ 266

4.8.1 Dynamic DNS......................................................................................................................266

4.8.2 GVRP .............................................................................................................................272

4.8.3 IGMP Proxy .........................................................................................................................273

4.8.4 UPnP .............................................................................................................................274

4.8.5 High Availability ...................................................................................................................276

4.8.6 Wake on LAN.......................................................................................................................287

4.8.7 SMS / Mail Alert Service......................................................................................................288

4.9 VPN and Remote Access......................................................................................................... 292

4.9.1 VPN Client Wizard...............................................................................................................292

4.9.2 VPN Server Wizard..............................................................................................................298

4.9.3 Remote Access Control.......................................................................................................303

4.9.4 PPP General Setup .............................................................................................................304

4.9.5 IPsec General Setup............................................................................................................307

4.9.6 VPN Profiles ........................................................................................................................308

4.9.7 VPN Trunk Management.....................................................................................................318

4.9.8 Connection Management ....................................................................................................323

4.10 Certificate Management.........................................................................................................325

Page 7

Vigor2960 Series User’s Guide

vii

4.10.1 Local Certificate.................................................................................................................326

4.10.2 Trusted CA Certificate .......................................................................................................331

4.10.3 Remote Certificate.............................................................................................................333

4.11 SSL VPN................................................................................................................................. 335

4.11.1 SSL Web Proxy .................................................................................................................335

4.11.2 SSL Application .................................................................................................................337

4.11.3 Online User Status.............................................................................................................341

4.12 Central VPN Management..................................................................................................... 342

4.12.1 General Setup....................................................................................................................343

4.12.2 CPE Management .............................................................................................................345

4.12.3 Log/Alert ............................................................................................................................354

4.13 Bandwidth Management ........................................................................................................ 355

4.13.1 Quality of Service...............................................................................................................355

4.13.2 QoS Rule...........................................................................................................................359

4.13.3 Sessions Limit....................................................................................................................366

4.13.4 Bandwidth Limit .................................................................................................................369

4.14 USB Application......................................................................................................................373

4.14.1 Disk Status.........................................................................................................................373

4.14.2 FTP User Management .....................................................................................................374

4.14.3 Temperature Sensor..........................................................................................................375

4.14.4 Modem Support List...........................................................................................................377

4.15 System Maintenance.............................................................................................................. 378

4.15.1 TR-069 .............................................................................................................................378

4.15.2 Administrator Password.....................................................................................................380

4.15.3 Configuration Backup ........................................................................................................381

4.15.4 Syslog / Mail Alert..............................................................................................................383

4.15.5 Time and Date...................................................................................................................386

4.15.6 Access Control...................................................................................................................387

4.15.7 SNMP Setup......................................................................................................................389

4.15.8 Reboot System..................................................................................................................390

4.15.9 Firmware Upgrade.............................................................................................................392

4.16 Diagnostics............................................................................................................................. 393

4.16.1 Routing Table ....................................................................................................................393

4.16.2 ARP Cache Table..............................................................................................................396

4.16.3 DHCP Table.......................................................................................................................399

4.16.4 Session Table....................................................................................................................401

4.16.5 Traffic Graph......................................................................................................................402

4.16.6 Web Console.....................................................................................................................404

4.16.7 Ping/Trace Route...............................................................................................................404

4.16.8 Data Flow Monitor..............................................................................................................405

4.17 External Devices .................................................................................................................... 406

4.18 Product Registration............................................................................................................... 407

Chapter 5: Trouble Shooting.........................................................................................409

5.1 Checking If the Hardware Status Is OK or Not......................................................................... 409

5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ...................... 410

5.3 Pinging the Router from Y our Computer.................................................................................. 413

5.4 Checking If the ISP Settings are OK or Not.............................................................................414

5.5 Backing to Factory Default Setting If Necessary...................................................................... 415

Page 8

Vigor2960 Series User’s Guide

viii

5.6 Contacting DrayTek.................................................................................................................. 416

Page 9

Vigor2960 Series User’s Guide

Chhaapptteerr 11:: IInnttrroodduuccttiioonn

The Vigor2960 Series integrates a rich suite of functions, including NAT, firewall, VPN, load balance, and bandwidth management capability. These products are very suitable for providing multi-integrated solutions to SME markets.

A Virtual Private Network (VPN) is an extension of a private network that encompasses links across shared or public networks like an Intranet. A VPN enables you to send data between two computers across a shared public Internet network in a manner that emulates the properties of a point-to-point private link. The DrayTek Vigor2960 Series VPN router supports Internet-industry standards technology to provide customers with open, interoperable VPN solutions such as X.509, DHCP over Internet Protocol Security (IPsec) up to 500 tunnels, and Point-to-Point Tunneling Protocol (PPTP).

11..11 WWeebb CCoonnffiigguurraattiioonn BBuuttttoonnss EExxppllaannaattiioonn

Several main buttons appeared on the web pages are defined as the following:

Save and apply current settings.

Cancel current settings and recover to the previous saved settings, or discard the settings configured in the page.

Go to next page.

Return to the previous page. Complete the setting configuration.

Remove the setting if you are not satisfied with it. Remove the selected entry.

Page 10

Vigor2960 Series User’s Guide

Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed explanation.

11..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss

Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. The displays of LED indicators and connectors for the routers are different slightly.

DDeessccrriippttiioonn ffoorr LLEEDD

LED Status Explanation

Blinking The router is powered on and running

normally.

ACT (Activity)

Off The router is powered off.

CSM On The profile(s) of CSM (Content Security

Management) for IM/P2P, URL/Web Content Filter application can be enabled from Firewall >>General Setup. (Such profile must be established under CSM menu).

On The VPN tunnel is active. VPN Off No VPN tunnel is active. On The DoS/DDoS function is active. DoS Blinking It will blink while deleting an attack. On The WAN1 or WAN2 connection is ready. WAN1/2 Blinking It will blink while transmitting data. On The QoS function is active.

QoS

Off The QoS function is disabled. On The USB device is connected and ready for

use.

USB1/2

Blinking The data is transmitting.

LED on Connector

On The port is connected. Off The port is disconnected.

Left LED (Green)

Blinking The data is transmitting. On The port is connected with 1000Mbps.

GigaWAN 1/2

Right LED (Green)

Off The port is connected with 10/100Mbps. On The port is connected. Off The port is disconnected.

Left LED (Green)

Blinking The data is transmitting. On The port is connected with 1000Mbps.

GigaLAN 1/2/3/4

Right LED (Green)

Off The port is connected with 10/100Mbps.

Page 11

Vigor2960 Series User’s Guide

Page 12

Vigor2960 Series User’s Guide

CCoonnnneeccttoorrss

Interface Description

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is

blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button.

Then the router will restart with the factory default configuration. GigaWAN 1/2 Connecters for remote networked devices. GigaLAN 1/2/3/4 Connecters for local networked devices. USB1/2 Connecter for Mobile HDD, 3G Modem or printer.

Connecter for a power cord.

ON/OFF - Power switch.

Page 13

Vigor2960 Series User’s Guide

11..33 HHaarrddwwaarree IInnssttaallllaattiioonn

11..33..11 NNeettwwoorrkk CCoonnnneeccttiioon

Before starting to configure the router, you have to connect your devices correctly.

1. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of Vigor2960s.

2. Connect the other end of the cable (RJ-45) to the Ethernet port on your computer (that

device also can connect to other computers to form a small area network). The LAN LED for that port on the front panel will light up.

3. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router

with Ethernet cable (RJ-45).

4. Connect the power cord to Vigor2960’s power port on the rear panel, and the other side

into a wall outlet.

5. Power on the device by pressing down the power switch on the rear panel. The PWR

LED should be ON.

6. The system starts to initiate. After completing the system test, the ACT LED will light

up and start blinking.

Below shows an outline of the hardware installation for your reference.

Page 14

Vigor2960 Series User’s Guide

11..33..22 WWaallll--MMoouunntteedd IInnssttaallllaattiioonn

The Vigor2960 Series can be mounted on the wall by using standard brackets shown below.

Choose a flat surface (on the wall) which is suitable for placing the router. Make the screw holes on the short side of the bracket aim at the screw holes on the router. Next, fasten both the bracket and the router with two screws; and fasten both the wall and the bracket with another two screws. Refer to the following figure.

Then, continue to fasten the screws on the other side of the router and the wall with other screws.

When you finished about procedure, the router has been mounted on the wall firmly.

Page 15

Vigor2960 Series User’s Guide

Chhaapptteerr 22:: IInniittiiaall

Coonnffiigguurraattiioonn

For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings.

This chapter explains how to setup a password for an administrator and how to adjust basic settings for accessing Internet successfully. Be aware that only the administrator can change the router configuration.

22..11 CChhaannggiinngg PPaasssswwoorrdd

To change the password for this device, you have to access into the web browse with default password first.

1. Make sure your computer connects to the router correctly.

Notice: You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section - Trouble Shooting of this guide.

2. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will

open to ask for username and password. Please type default values on the window for the first time accessing. The default value for user name is admin and the password is admin. Next, click Login.

Page 16

Vigor2960 Series User’s Guide

3. Now, the Main Screen will pop up.

4. Go to System Maintenance page and choose Administrator Password.

5. Enter the login password (admin, in default) on the field of Original Password. Type a

new one in the field of New Password and retype it on the field of Confirm Password. Then click Apply to continue.

6. Now, the password has been changed. Next time, use the new password to access the

Web Configurator for this router.

Page 17

Vigor2960 Series User’s Guide

22..22 QQuuiicckk SSttaarrtt WWiizzaarrdd

Quick Start Wizard is a wizard which is designed for configuring your router accessing Internet with simply steps. In the Quick Start Wizard group, you can configure the router to access the Internet with different modes such as Static, DHCP, PPPoE, or PPTP modes.

For most users, Internet access is the primary application. The router supports the Ethernet WAN interface for Internet access.

Click Quick Start Wizard from the home page. Quick Start Wizard will guide the user to establish LAN interface profile, WAN interface profile and select proper protocol for connection. The following will explain in more detail for the various broadband access configurations.

22..22..11 SStteepp 11 –– SSppeecciiffyyiinngg tthhee WWAANN PPrrooffiillee

In the first page of Quick Start Wizard, please choose a WAN profile and specify IPv4 protocol.

Available parameters are listed as follows:

Item Description Profile

Use the drop down list to choose one of the WAN profiles for modifying.

IPv4 Protocol

Use the drop down list to choose the type for the IPv4 protocol for such profile.

Page 18

Vigor2960 Series User’s Guide

When you finish the above settings, please click Next to go to next page.

22..22..22 SStteepp 22 -- CCoonnffiigguurriinngg tthhee SSeelleecctteedd PPrroottooccooll

This page will be changed according to the IPv4 Protocol Type selected on last page.

IIff SSttaattiicc iiss sseelleecctteedd

If Static is selected, the following screen will appear. You can manually assign a static IP address to the WAN interface and complete the configuration by applying the settings and rebooting your router. Please type in values for Static IP address, Static Mask, Static Gateway and Static DNS specified by your ISP, and then click Next.

Available parameters are listed as follows:

Item Description IP Address

Type a public IP address for such WAN profile.

Subnet Mask

Choose the static mask from the drop down list.

Gateway IP Address

Type a public gateway address for such WAN profile.

DNS Server IP Address

Add – Click this button to display the IP address field for

adding a new IP address. Type the IP address on the tiny boxes one by one.

Page 19

Vigor2960 Series User’s Guide

Save – After finished the IP address configuration, click Save to save the setting onto the router.

Click it to return to previous setting page.

Finish

Click it to finish the configuration.

Cancel

Click it to discard the settings configured in this page.

When you finished the above settings, please click Finish.

Page 20

Vigor2960 Series User’s Guide

IIff DDHHCCPP iiss sseelleecctteedd

DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet. If you choose DHCP mode, the DHCP server of your ISP will assign a dynamic IP address for Vigor2960 automatically. It is not necessary for you to assign any setting. (Host Name is required for some ISPs).

Available parameters are listed as follows:

Item Description Host Name (Optional)

Type a name as the host name for identification.

Click it to return to previous setting page.

Finish

Click it to finish the configuration.

Cancel

Click it to discard the settings configured in this page.

When you finished the above settings, please click Finish.

IIff PPPPPPooEE iiss sseelleecctteedd

PPPoE stands for Point-to-Point Protocol over Ethernet. It relies on two widely accepted standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a common broadband medium, such as a single DSL line, wireless device or cable modem. All the users over the Ethernet can share a common connection.

PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet. Your service provider will provide you information about user name, password, and authentication mode.

If your ISP provides you the PPPoE (Point-to-Point Protocol over Ethernet) connection, please select PPPoE for this router to get the following page. Enter the username and password provided by your ISP on the web page.

Page 21

Vigor2960 Series User’s Guide

Available parameters are listed as follows:

Item Description Username

Type in the username provided by ISP in this field.

Password

Type in the password provided by ISP in this field.

Click it to return to previous setting page.

Finish

Click it to finish the configuration.

Cancel

Click it to discard the settings configured in this page.

When you finished the above settings, please click Finish.

Page 22

Vigor2960 Series User’s Guide

IIff PPPPTTPP iiss sseelleecctteedd

This mode lets user get the IP group information by a DSL modem with PPTP service from ISP. Your service provider will give you user name, password, and authentication mode for a PPTP setting. Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol.

If your ISP offers you PPTP (Point-to-Point Tunneling Protocol) mode, please select PPTP for this router. Next, enter the settings provided by your ISP on the web page.

Available parameters are listed as follows:

Item Description PPTP Over

Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this

function.

Static – specify the IP address. DHCP - obtain the IP address automatically.

Page 23

Vigor2960 Series User’s Guide

Server Address

Type a remote IP address of PPTP server.

Username

Type in the username provided by ISP in this field.

Password

Type in the password provided by ISP in this field.

Click it to return to previous setting page.

IP Address

Type a public IP address for such WAN profile.

Subnet Mask

Choose the static mask from the drop down list.

Gateway IP Address

Type a public gateway address for such WAN profile.

DNS Server IP Address

To add a new IP address, simply place the mouse cursor on this filed. The following dialog will appear.

Add – Click this button to display the IP address field for adding a new IP address.

Save – After finished the IP address configuration, click Save to save the setting onto the router.

Click it to return to previous setting page.

Finish

Click it to finish the configuration.

Cancel

Click it to discard the settings configured in this page.

When you finished the above settings, please click Finish. Later, you can surf the Internet at any time.

Page 24

Vigor2960 Series User’s Guide

When the following screen appears, it means you have finished the Quick Start Wizard configuration.

Page 25

Vigor2960 Series User’s Guide

22..33 RReeggiisstteerr VViiggoorr RRoouutteerr

Please follow the steps below to register the router. 1 Before using such function, please register your router online first. Log into the web

configurator of Vigor2960 and click Product Registration.

2 A Login page will be shown on the screen. Please type the account and password that

you created previously. And click Login.

Notice: If you haven’t an accessing account, please create a new one first. Please read the articles on the Agreement regarding user rights carefully while

creating a user account.

Page 26

Vigor2960 Series User’s Guide

3 The following page will be displayed after you logging in MyVigor. From this page,

please click Add.

4 When the following page appears, please type in Nick Name (for the router) and choose

the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit.

Page 27

Vigor2960 Series User’s Guide

5 Now, your router information has been added to the database. Click OK to leave this

web page and return to My Information web page.

6 Take a look at the page of My Information, the new added Vigor2960 is listed under

Your Device List.

Page 28

Vigor2960 Series User’s Guide

This page is left blank.

Page 29

Vigor2960 Series User’s Guide

Chhaapptteerr 33::

Apppplliiccaattiioonn aanndd

TTuuttoorriiaall

33..11 HHooww ttoo BBuuiilldd SSSSLL VVPPNN wwiitthh RRDDPP SSeerrvviiccee iinn tthhee BBrroowwsseerr vviiaa LLooggggiinngg iinn RRoouutteerr''ss HHTTTTPPSS SSeerrvveerr??

Remote Desktop Protocol (RDP) is a protocol designed for secure communications in networks using Microsoft Terminal Services. An easy way is provided to establish connection between the router and the RDP Server via any browser.

1. Open the web configurator of Vigor2960.

2. Enable the HTTPS service from System Maintenance >> Access Control by clicking

Enable for HTTPS Allow and type 443 as the value of HTTPS Port.

Page 30

Vigor2960 Series User’s Guide

3. Open SSL VPN >> SSL Application and click the RDP tab to create a profile named

“Win7”. Type IP address, Port number, and Screen Size based on the actual RDP server information, then click Apply to save the settings.

4. Open User Management >> User Profile to create a new profile named “7788”. Set

the Password as 7788 and choose the profile of Win7 as SSL Application (RDP). Click Apply.

5. Logout Vigor2960.

6. Login Vigor2960 HTTPS Server with 7788 for both Username and Password.

Page 31

Vigor2960 Series User’s Guide

7. A screen like the following figure will appear. Simply click the SSL Application link.

8. In the following screen, click Connect for connecting to Win7, the RDP server.

Page 32

Vigor2960 Series User’s Guide

9. After that, you can access into Windows 7 via a browser. Note the message below the

window. In which, TLS means Transport Layer Security.

Page 33

Vigor2960 Series User’s Guide

Troubleshooting

If you have installed Java Runtime Environment edition 6 but still cannot establish the connection, please make sure you have disabled “Use TLS 1.0” in the Java Control Panel as figure shown below. Then, try to connect again.

Page 34

Vigor2960 Series User’s Guide

33..22 HHooww ttoo CCoonnffiigguurree OOSSPPFF??

OSPF (Open Shortest Path First) uses the algorithm of SPF (Shortest Path First) to calculate the route metric. It is suitable for large network and complicated data exchange. Both Vigor3900 and Vigor2960 support up to OSPF version 2(only for IPv4).

The autonomous system (AS) used in OSPF indicates the largest entity and can be divided into several areas. Usually, Area 0 will be used as OSPF backbone which distributing the routing information among areas.

When you need faster convergence than distance vector, want to support much larger networks or want to have less susceptible to bad routing information, you can enable OSPF feature to fit your request. Note that both routers must support OSPF function at the same time to build the OSPF connection.

In the following example, a PC can go 192.168.2.0/24 and 192.168.4.0/24 without setting any Static Route. Refer to the OSPF topology diagram listed below.

OSPF can place each router (e.g., Vigor3900A, Vigor3900B and Vigor2960 shown above) at the root of a tree and calculate the shortest path to each destination according to the cumulative cost to reach the destination.

Each router has its own view of the topology and calculates its own SPF tree, even though all the routers build a shortest-path tree using the same link-state database.

Page 35

Vigor2960 Series User’s Guide

CCoonnffiigguurraattiioonn ffoorr VViiggoorr33990000 AA,,

1. Open Routing >> General Setup to create a LAN (192.168.1.1/24) profile named lan1

with the settings shown below.

2. Next, continue to create a LAN (192.168.3.1/24) profile named lan2 with the settings

shown below.

3. Open LAN >> Static Route Setup and click the Inter-LAN Route tab to enable this

profile.

Page 36

Vigor2960 Series User’s Guide

4. Open LAN >> OSPF Configuration to enable this profile. Click Add to make the LAN

Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.)

CCoonnffiigguurraattiioonn ffoorr VViiggoorr33990000 BB,,

1. Open LAN >> General Setup to create a LAN (192.168.2.1/24) profile named lan1

with the settings shown below.

2. Next, continue to create a LAN (192.168.3.2/24) profile named lan2 with the settings

shown below.

Page 37

Vigor2960 Series User’s Guide

3. Open LAN >> Static Route Setup and click the Inter-LAN Route tab to enable this

profile.

4. Open LAN >> OSPF Configuration to enable this profile. Click Add to make the LAN

Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.)

CCoonnffiigguurraattiioonn ffoorr VViiggoorr22996600,,

1. Open LAN >> General Setup to create a LAN (192.168.4.1/24) profile named lan1

with the settings shown below.

Page 38

Vigor2960 Series User’s Guide

2. Next, continue to create a LAN (192.168.3.3/24) profile named lan2 with the settings

shown below.

3. Open LAN >> General Setup and click the Inter-LAN Route tab to enable this profile.

Page 39

Vigor2960 Series User’s Guide

4. Open Routing >> OSPF Configuration to enable this profile. Click Add to make the

LAN Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.)

5. After setting, check the routing information (marked with red line) which is created by

OSPF.

RRoouuttiinngg iinnffoorrmmaattiioonn ffoorr VViiggoorr33990000 AA

RRoouuttiinngg iinnffoorrmmaattiioonn ffoorr VViiggoorr33990000 BB

RRoouuttiinngg iinnffoorrmmaattiioonn ffoorr VViiggoorr22996600

Page 40

Vigor2960 Series User’s Guide

Page 41

Vigor2960 Series User’s Guide

33..33 HHooww ttoo CCoonnffiigguurree LLAANN ttoo LLAANN IIPPsseecc TTuunnnneell bbeettwweeeenn VViiggoorr22996600 aanndd OOtthheerr RRoouutteerr

Here provides an example about LAN to LAN IPsec tunnel established between Vigor2960 and Vigor2710.

CCoonnffiigguurriinngg VViiggoorr22996600

1. Access into the web configurator of Vigor2960 and open VPN and Remote Access >>

VPN Profiles to add a new VPN configuration.

Type the Pre-shared key and choose a WAN Profile. Specify Local IP/Subnet Mask with 192.168.29.0/24. The Remote Host should be Vigor 2710's WAN IP address; And the Remote IP/Subnet Mask should be192.168.2.0/24.

2. Click Apply to save the settings and return to previous page.

Page 42

Vigor2960 Series User’s Guide

CCoonnffiigguurriinngg VViiggoorr2277110

1. In Vigor2710, it is necessary to build two VPN connections (for two WANs) to connect

with Vigor2960. Please open the web configurator of Vigor2710 and open VPN and Remote Access >> LAN to LAN.

 First, please type the name of such VPN connection in the field of Profile Name

(e.g., 2960).

 Check the box of Enable this profile.  Choose Dial-Out as Call Direction and check the box of Always on.

2. For Dial-Out Settings, please choose IPsec Tunnel and type WAN IP address of

Vigor2960 in the field of Server IP/Host Name for VPN (e.g., 1.169.162.1). Type the same IKE Pre-Shared Key configured in Vigor2960.

Page 43

Vigor2960 Series User’s Guide

3. For the role of Vigor2710 is dialing-out, please skip Dial-In setting. Type the Remote

Network IP and Remote Network Mask of Vigor2960 to complete configuration.

4. Please check if the VPN connection is built successfully in both devices respectively.

For Vigor2960, open VPN and Remote Access>>IPsec>>Status for viewing the result.

As to Vigor2710, please open VPN and Remote Access>>Connection Management to confirm the result.

Page 44

Vigor2960 Series User’s Guide

33..44 CCVVMM AApppplliiccaattiioonn -- HHooww ttoo mmaannaaggee tthhee CCPPEE ((rroouutteerr)) tthhrroouugghh VViiggoorr22996600??

To manage CPEs through Vigor2960, you have to set URL on CPE first and set username and password for Vigor2960. For this section, we use Vigor2830 series as the example. The firmware upgrade for the CPE can be done through Vigor2830 series.

33..44..11 CCoonnffiigguurree SSeettttiinnggss oonn VViiggoorr22996600

1. Access into the web user interface of Vigor2960.

2. Open System Maintenance>>Access Control. Check Enable for Web Allow and

type the value for Web Port. Then click Apply to save the settings.

3. Open Central VPN Management>>CPE Management. On the page of CPE

Maintenance, there is no CPE managed by Vigor2960.

4. Open Central VPN Management>>General Setup.

Page 45

Vigor2960 Series User’s Guide

5. Click the General Setup tab. Check the Enable box. Specify the WAN interface from

the WAN Profile drop down list. Type the values for Port, Username, and Password respectively. Remember the values configured in this page.

6. Click Apply to save the settings.

33..44..22 CCoonnffiigguurree SSeettttiinnggss oonn CCPPEE

To manage CPEs through Vigor2960, you have to set ACS URL on CPE first and set username and password for Vigor2960.

1. Connect one CPE (e.g., Vigor2830 series) and get ready to access into the web user

interface of the CPE.

2. Open a web browser (for example, IE, Mozilla Firefox or Netscape) on your computer

and type http://192.168.1.1.

3. Please type username and password on the window. If you don’t know the correct

username and password, please consult our dealer to get them.

4. Open System Maintenance >> TR-069.

5. In the field of ACS Server, type the URL (IP address with port number) of Vigor2960:

“http://{IP address of Vigor296}:{CVM port}/ACSServer/services/ACSServlet” and type the same Username and Password defined on the page of Central VPN Management>>General Setup in Vigor2960. Then, click Enable for CPE Client and then click OK to save the settings.

Page 46

Vigor2960 Series User’s Guide

33..44..33 IInnvvookkee RReemmoottee MMaannaaggeemmeenntt ffoorr CCPPEE

1. Login the web user interface of the CPE.

2. Open System Maintenance>>Management Setup.

3. Check Allow management from the Internet to set management access control.

Page 47

Vigor2960 Series User’s Guide

33..44..44 EEnnaabbllee WWAANN CCoonnnneeccttiioonn oonn CCPPEE

1. Login the web user interface of the CPE.

2. Open WAN>>Internet Access. Use the drop down list of Access Mode on WAN1 to

select MPoA (RFC1483/2684). Then, click Details Page.

3. Click Specify an IP address. Type correct WAN IP address, subnet mask and gateway

IP address for your CPE. Then click OK.

Note: Reboot the CPE device and re-log into Vigor2960. CPE which has registered to Vigor2960 will be captured and displayed on the page of Central VPN Management>>CPE Management.

Page 48

Vigor2960 Series User’s Guide

33..44..55 CChheecckk CCPPEE MMaaiinntteennaannccee PPaaggee

1. Return to the web user interface of Vigor2960.

2. Open Central VPN Management>>CPE Management.

3. Now there is one CPE managed (Vigor2830) by Vigor2960 on the page of CPE

Maintenance.

Page 49

Vigor2960 Series User’s Guide

33..55 CCVVMM AApppplliiccaattiioonn -- HHooww ttoo bbuuiilldd tthhee VVPPNN bbeettwweeeenn rreemmoottee ddeevviicceess aanndd VViiggoorr22996600??

When a remote device is managed by Vigor2960 series, it is easy to build VPN between these two devices.

1. Access into the web user interface of Vigor2960 series.

2. Open Central VPN Management>>CPE Management. The icons displayed on the

screen means the remote devices are ready for building VPN with Vigor2960.

3. Click the device icon (marked with

) and click the PPTP or IPsec button.

Page 50

Vigor2960 Series User’s Guide

Or click Advanced to open the following page for specified the CPE you want. Click Connect after finished the settings.

4. A confirmation dialog will appear. Click OK and wait for a moment.

5. If VPN is built successfully, related information will be displayed on Connected

Devices.

Page 51

Vigor2960 Series User’s Guide

6. A LAN to LAN profile for such VPN will be generated automatically. You can access

into VPN and Remote Access>>LAN to LAN of the remote device for viewing the detailed information.

Note: The profile name is created automatically by the system. Do not modify any value in such page to avoid VPN error.

Page 52

Vigor2960 Series User’s Guide

33..66 CCVVMM AApppplliiccaattiioonn -- HHooww ttoo uuppggrraaddee CCPPEE ffiirrmmwwaarree tthhrroouugghh VViiggoorr22996600??

33..66..11 IImmppoorrtt ffiirrmmwwaarree ffiillee ffrroomm yyoouurr PPCC ttoo VViiggoorr22996600

1. Suppose the newest firmware file is located on your PC. You can upload it from your

PC to Vigor2960.

2. Log into the web user interface of Vigor2960.

3. Open System Maintenance>>Access Control. Check Enable for Web Allow and

type the value for Web Port. Then click Apply to save the settings.

4. Open Central VPN Management>>CPE Management. Click CPE Maintenance. In

the Maintenance area, click File Explorer.

5. In the File Explorer dialog, click Upload.

Page 53

Vigor2960 Series User’s Guide

6. In the Upload dialog, click the Browse.. button to find out the firmware (e.g.,

2830_0508 in this case) you want to upload from PC to Vigor2960. Then, click Upload.

Page 54

Vigor2960 Series User’s Guide

7. When the file is uploaded successfully, later you will find the one in the File Explorer

dialog.

Page 55

Vigor2960 Series User’s Guide

33..66..22 SSeett aa nneeww ffiirrmmwwaarree uuppggrraaddee pprrooffiillee

To create a new firmware upgrade profile, one CPE (e.g., 2830 in this case) must be managed by Vigor2960 at least. Otherwise, the profile cannot be created successfully.

1. Open Central VPN Management>>CPE Management. Click CPE Maintenance. In

the Maintenance area, click Add.

2. In the following dialog, type the name for the new profile; specify the vigor router the

file will be applied to; choose Firmware Upgrade as the Action, choose Now as the Schedule (it means the firmware upgrade will be performed after clicking Apply); and

type the string of the firmware filename or click

to choose a correct one.

Page 56

Vigor2960 Series User’s Guide

3. When you finished the above settings, click Apply to save them. The new maintenance

profile has been created and displayed on the Maintenance area.

4. Now, the new firmware will be loaded into the CPE immediately (based on the

schedule setting – now).

Note that a red icon,

will appear during the period of firmware upgrading.

And, in the web user interface of client’s CPE, the system will show you that firmware upgrade is on going.

Page 57

Vigor2960 Series User’s Guide

5. Please wait for a moment. Later, open Central VPN Management>>Log/Alert>>Log

page to check the result. If [Finished] is displayed, it means the firmware upgrade of specified CPE has completed.

33..66..33 CChheecckk tthhee DDeevviiccee IInnffoorrmmaattiioonn

1. Open Central VPN Management>>CPE Management. In the Managed Devices

Status area, choose the router (representing Vigor2830) and click Detail.

2. Check the software version field.

Page 58

Vigor2960 Series User’s Guide

33..77 HHooww ttoo uussee HHiigghh AAvvaaiillaabbiilliittyy ffoorr VViiggoorr rroouutteerrss??

The High Availability (HA) feature in Vigor2960 can ensure the business continuity for your organization. IT staff can use HA as a simple solution for the disaster recovery. Vigor2960 utilizes the Common Address Redundancy Protocol (CARP) to avoid the system crashing which could stop the normal operation and then cause considerable lost of the entire organization.

When the HA feature is enabled, the network administrator can set another Vigor2960(s) as the backup device(s) to deliver full routing services during the shutdown of the main Vigor2960. The network administrator can use a Virtual IP (e.g. 192.168.1.100) for both master device and backup device. During the system uptime, the master device (e.g.

192.168.1.1) can offer services and act as the Virtual IP. Once the master device is temporarily out-of-service, the backup device(s) (e.g. 192.168.1.5) will take over the service that the Virtual IP does and deliver all routing functions.

Note: Make sure the WAN interfaces for both Router A and Router B are well connected. Both routers can be used to access into Internet.

Note: For advanced applications, please refer to FAQ/Application Notes on www.draytek.com.

Page 59

Vigor2960 Series User’s Guide

FFoorr rroouutteerr AA

1. Access into the web user interface of Vigor2960.

2. Open Applications >>High Availability.

3. In the tab of High Availability Global Setup, choose Hot-Standby as Redundant

Method; choose Primary as Config Synchronization Rule; type draytek as Authentication Key; choose Immediate as Advance Preemption Mode. Click Apply to save the settings.

4. Click the High Availability Profile Setup tab to create HA profile(s). Click Add.

Page 60

Vigor2960 Series User’s Guide

5. Create an HA profile. Refer to the following figures.

6. Now, the configuration for router A has been finished.

FFoorr rroouutteerr BB

1. Access into the web user interface of Vigor2960.

2. Open Applications >>High Availability.

3. In the tab of High Availability Global Setup, choose Hot-Standby as Redundant

Method; choose Secondary as Config Synchronization Rule; type the lan1 IP address configured in router A; type draytek as Authentication Key; choose Automatic as Advance Preemption Mode. Click Apply to save the settings.

Page 61

Vigor2960 Series User’s Guide

4. Click the High Availability Profile Setup tab to create HA profile(s). Click Add.

5. Create an HA profile. Refer to the following figures.

Type the lan1 IP address configured in Router A

Page 62

Vigor2960 Series User’s Guide

6. Now, the configuration for router B has been finished. After finished the above settings, it is the time to activate HA function for both router A and

router B. It is recommended to activate the HA for router A (Primary) before router B (Secondary).

 Simply open Applications>>High Availability and click the High Availability

Global Setup. Locate Enable High Availability. Check the box and click Apply to

save the settings.

Under such construction, when Router A (defined as Master device) is powered off, Router B (defined as Slave device) will be up and take over all the jobs that Router A performs. Later, when Router A is powered on again, all the jobs will return to Router

Page 63

Vigor2960 Series User’s Guide

33..88 HHooww ttoo CCoonnffiigguurree DDNNSS IInnbboouunndd LLooaadd BBaallaannccee oonn VViiggoorr 22996600??

Vigor2960 can offer the mapped IP address to respond the DNS query coming from the remote end through the designate domain to reduce the loading of the network traffic.

WAN1 IP Address: 1.1.1.1 WAN2 IP Address: 2.2.2.2 Inbound Load Balance

allows Vigor2960 acting as a DNS Server to separate the traffic for

each WAN interface according to the DNS query time. Follow the steps listed below to Configure DNS Inbound Load Balance.

EEnnaabblliinngg WWeebb sseerrvviiccee oonn tthhee RRoouutteerr

1. Open NAT >> Port Redirection to set up Port Redirection rules for the Web server.

Click Apply to save the settings.

Page 64

Vigor2960 Series User’s Guide

2. Open WAN >> Load Balance and click the tab of Inbound Load Balance to enable the

service. Click Add.

3. Add a profile named “yourdomain.com”. Define WAN1 weights 1 and WAN2 weights 2.

It means the total DNS query time will be three, one will pass through WAN1; two will pass through WAN2.

4. Click the Detail tab and locate Additional A Record. Type “www” as the name of the

Host, and type “192.168.1.10” as the IP Address.

Page 65

Vigor2960 Series User’s Guide

5. Then click Apply to save the settings.

Now, make a test for inbound load balance. Click Start>> Run and type cmd. Execute the command, nslookup, for DNS query test.

First DNS query >www.yourdomain.com

Server: [google-public-dns-a.google.com] Address: 8.8.8.8

Name: www. yourdomain.com

Address: 1.1.1.1

Second DNS query > www.yourdomain.com

Server: [google-public-dns-a.google.com] Address: 8.8.8.8

Name: www.yourdomain.com

Address: 2.2.2.2

Third DNS query > www.yourdomain.com

Server: [google-public-dns-a.google.com] Address: 8.8.8.8

Name: www.yourdomain.com

Address: 2.2.2.2

Note: It is recommended to clear cache before executing “nslookup” for DNS query.

Page 66

Vigor2960 Series User’s Guide

This page is left blank.

Page 67

Vigor2960 Series User’s Guide

Chhaapptteerr 44::

Addvvaanncceedd

Coonnffiigguurraattiioonn

After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suiting his/her request, please refer to this chapter for getting detailed information about the advanced configuration of this router. As for other examples of application, please refer to chapter 3.

44..11 WWAANN

Quick Start Wizard offers user an easy method to quick setup the connection mode for the router. Moreover, if you want to adjust more settings for different WAN modes, please go to WAN group and click the General Setup link.

BBaassiiccss ooff IInntteerrnneett PPrroottooccooll ((IIPP)) NNeettwwoorrkk

IP means Internet Protocol. Every device in an IP-based Network including routers, print server, and host PCs, needs an IP address to identify its location on the network. To avoid address conflicts, IP addresses are publicly registered with the Network Information Centre (NIC). Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP/IP local area networks (LANs), such as host PCs under the management of a router since they do not need to be accessed by the public. Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges:

From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255

WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss

As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts. Meanwhile, Vigor router will communicate with other network devices through a public IP address. When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network. Thus, all the host PCs can share a common Internet connection.

GGeett YYoouurr PPuubblliicc IIPP AAddddrreessss ffrroomm IISSPP

In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is required for bridging customer premises equipment (CPE). Point to Point Protocol over Ethernet (PPPoE) connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator. This implementation provides users with significant ease of use. Meanwhile it provides access control, billing, and type of service according to user requirement.

When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Your user ID and password is authenticated

Page 68

Vigor2960 Series User’s Guide

via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP.

44..11..11 GGeenneerraall SSeettuupp

This section will introduce some general settings of Internet and explain the connection modes for WAN profiles in details.

This router supports multi-WAN function. It allows users to access Internet and combine the bandwidth of the WAN profiles to speed up the transmission through the network. Each WAN port can connect to different ISPs, even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable modem, etc.). If any connection problem occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation.

Note: Some menu items (e.g., Bridge VLAN) are available only under Advance Mode.

Web Page in Basic Mode

Web Page in Advance Mode

Page 69

Vigor2960 Series User’s Guide

Each item will be explained as follows:

Item Description Add

Add a new WAN profile. Such function is available in Advance mode only.

Edit

Modify the selected WAN profile. To edit a profile, simply select the one you want to modify

and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected rule.

Delete

Remove the selected WAN profile. Such function is available in Advance mode only.

To delete a profile, simply select the one you want to delete and click the Delete button.

Refresh

Renew current web page.

Mode

Specify the mode for adding /editing (Advance) new WAN profile or just editing (Basic) existing WAN profile.

Switch Mode

This mode determines a WAN interface can be set with single or double VLAN ID values.

Normal – It means only one VLAN ID value can be configured for the WAN interface.

Double Tag – It means two VLAN ID values (

802.1q in q)

can be configured for a WAN interface.

Profile Number Limit

Display the total number (50) of the profiles to be created.

Profile (max length:7)

Display the profile name.

Enable

Display the status of the profile. False means disabled; True means enabled.

Description

Display a brief explanation for such profile.

Port

Display the physical WAN interface for such profile.

IPv4 Protocol Type

Display the IPv4 protocol selected by the profile.

IPv6 Protocol Type

Display the IPv6 protocol selected by the profile.

VLAN Tag

If the data transmitted with tag, Enable will be displayed in this field. Otherwise, Disable will be shown instead.

VLAN ID

Display the VLAN ID of the profile.

Priority

Display the level of the priority for such profile.

Page 70

Vigor2960 Series User’s Guide

44..11..11..11 EEtthheerrnneett WWAANN PPrrooffiilleess

How to add a new WAN profile:

1. If the router is under Basic mode, you have to switch into Advance mode. If the router

is under Advance mode, go to Step 4 directly.

2. A confirmation dialog will appear. Click OK to apply the related settings for Advance

mode.

3. Re-login the system.

4. Open WAN>>General Setup. Click the Add button to open the following dialog.

Different protocol type selected will bring up different configuration web page.

Available parameters for global configuration are listed as follows:

Item Description Profile (max

Type a name (less than 7 characters) for such profile.

Page 71

Vigor2960 Series User’s Guide

length:7) Enable

Check this box to enable such profile.

Description

Give the brief description for such profile.

Port

Display the physical WAN interface for such profile.

Default MAC Address

Enable – Click it to enable the default MAC address for

such profile. Disable – Click it to type the MAC address manually for

such profile. MAC Address - Specify the MAC address for such profile if

you click Disable for Default MAC address. In default, the system will determine it automatically.

IPv4 Protocol

There are four connection modes for you to specify for IPv4 protocol type. Each mode will bring up different web page.

Mode

Determine such profile will be used for NAT or routing.

IPv6 Protocol

There are five connection modes for you to specify for IPv6 protocol type. Each mode will bring up different web page.

Enable Schedule Reconnect

Enable – Click it to enable the function of reconnecting the

network automatically within the time schedule.

 Schedule Time Object - Choose the time object profile

to be applied by such WAN.

Disable – Click it to disable the schedule reconnect function.

VLAN Tag

Enable – Click it to enable the function of VLAN Tag. Data

transmitted through the router will be tagged with specified number for identification.

Disable – Click it to disable the function of VLAN Tag.

Page 72

Vigor2960 Series User’s Guide

Data transmitted through the router will not be tagged with any number.

VLAN ID

Type the VLAN ID number for such profile.

Priority(802.1p)

Type the packet priority number for such VLAN. The range is from 0 to 7.

Apply

Click it to save the configuration and exit the dialog.

Cancel

Click it to exit the dialog without saving the configuration.

Global configuration allows you to enable the profile, give a brief explanation for such profile, specify the VLAN ID, specify MAC address, choose IPv4 and IPv6 protocol, and specify the mode of the data transmission (NAT or Routing).

Page 73

Vigor2960 Series User’s Guide

Different IPv4 and IPv6 protocol types specified will bring up different configuration web page.

 If you choose Static as IPv4 protocol type, click the Static tab to open the following

page:

Available parameters are listed as follows:

Item Description IP Address

Type the IP address specified for such profile.

Subnet Mask

Use the drop down list to choose the subnet mask for such profile.

Gateway IP Address

Type a public gateway address for such WAN profile.

DNS Server IP Address

Add – Click this button to display the IP address field for

adding a new IP address. Type the IP address on the tiny boxes one by one.

Save – After finished the IP address configuration, click Save to save the setting onto the router.

IP Alias

Type other IP addresses to be bound to this interface. This

Page 74

Vigor2960 Series User’s Guide

setting is optional. If you have typed addresses here, you can see and choose it in later web page settings (e.g.,

NAT>>Port Redirection/DMZ Host). Add – Click this button to display the IP address field for

adding a new IP address. Type the IP address on the tiny boxes one by one.

Save – After finished the IP address configuration, click Save to save the setting onto the router.

MTU/MRU

Type the value of MTU/MRU. The default value is 1500.

Connection Detection Mode

Select a detecting mode for this WAN interface. There are three ways ARP, PING and HTTP supported in Vigor router for you to choose to send the request out.

Connection Detection Host

Assign an IP address or Domain name as a destination to be detected whether the host is active (sending reply to the router) or not. If not, the connection of WAN interface will be regarded as breaking down. This function is available when Connection Detection Mode is set with PING or

HTTP.

Add – click this button to have a field for adding a new IP

address.

Save – click this button to save the setting.

Connection Detection Interval

Assign an interval period of time for each detecting.

Page 75

Vigor2960 Series User’s Guide

Connection Detection Retry

Assign detecting times to ensure the connection of the WAN interface. After passing the times you set in this field and no reply received by the router, the connection of WAN interface will be regarded as breaking down.

Apply

Click it to save the configuration and exit the dialog.

Cancel

Click it to exit the dialog without saving the configuration.

 If you choose DHCP as IPv4 protocol type, click the DHCP Tab to open the

following page:

Available parameters are listed as follows:

Item Description Host Name

(Optional)

Type a name as the host name for identification.

IP Alias

Type other IP addresses to be bound to this interface. This setting is optional. If you have typed addresses here, you can see and choose it in later web page settings (e.g.,

NAT>>Port Redirection. Add – To add a new IP address, click Add. Type the IP

address and use the drop down list to specify the subnet mask. Next, click Save. The new one will be added and displayed on the field under the box.

Save – Click this button to save the setting.

Page 76

Vigor2960 Series User’s Guide

MTU/MRU

It means Max Transmit Unit for packet. The default setting is 1500.

Connection Detection Mode

Select a detecting mode for this WAN interface. There are three ways ARP, PING and HTTP supported in Vigor router for you to choose to send the request out.

Connection Detection Host

Add – click this button to have a field for adding a new IP

address. Assign an IP address or Domain name as a destination to be detected whether the host is active (sending reply to the router) or not. If not, the connection of WAN interface will be regarded as breaking down. This function is available when Connection Detection Mode is set with

PING or HTTP.

Save – Click this button to save the setting.

Connection Detection Interval

Assign an interval period of time for each detecting.

Connection Detection Retry

Vendor Class ID (option 60)

Type a string for identification of vendor. It is required for the mode, DHCP (option 60).

DHCP Client ID (option 61)

Type a string for identification of client. It is required for the mode, DHCP (option 61).

Specify DNS

Enable – Click it to enable the function of DNS specified. It is used for local service (e.g., NTP, ping diagnostic) or

used for forwarding packets to PC on LAN/VPN. Disable – Click it to disable the function of DNS specified.

DNS

Add – click this button to have a field for adding a new IP

address.

Save – click this button to save the setting.

Apply

Click it to save the configuration and exit the dialog.

Cancel

Click it to exit the dialog without saving the configuration.

Page 77

Vigor2960 Series User’s Guide

 If you choose PPPoE as IPv4 protocol type, click the PPPoE Tab to open the

following page:

Available parameters are listed as follows:

Item Description Username

Type the user name offered by your ISP.

Password

Type the password offered by your ISP.

MTU/MRU

Type the value of MTU/MRU. The default value is 1492.

Service Name

This is an optional setting. Some ISP will offer such information and ask you to type the same data on this field.

Debug

Click Enable to display the PPPoE debug message in Syslog. The default setting is Disable.

Always On

Enable – Click it to enable the function of Always On. The

router will keep network connection all the time.

Disable – Click it to disable the function of Always On.

Fixed IP

Enable – Click it to enable the function of Always On. The

router will keep network connection all the time.

Disable – Click it to disable the function of Always On. Fixed IP Address – Type an IP address here if you choose

Enable for Fixed IP.

Connection Detection Mode

Select a detecting mode for this WAN interface. There are two ways PING and HTTP supported in Vigor router for you to choose to send the request out.

Page 78

Vigor2960 Series User’s Guide

Connection Detection Host

If you choose PING/HTTP as Connection Detection Mode, you have to specify the detection host address in this field. Use the default setting.

Add – Click this button to have a field for adding a new IP address. Assign an IP address or Domain name as a destination to be detected whether the host is active (sending reply to the router) or not. If not, the connection of WAN interface will be regarded as breaking down. This function is available when Connection Detection Mode is set with

PING or HTTP.

Save – Click this button to save the setting.

Connection Detection Interval

Assign an interval period of time for each detecting.

Connection Detection Retry

IP Alias

Type other IP addresses to be bound to this interface. This setting is optional. If you have typed addresses here, you can see and choose it in later web page settings (e.g.,

NAT>>Port Redirection/DMZ Host). Add – Click this button to display the IP address field for

adding a new IP address. Type the IP address on the tiny boxes one by one.

Save – After finished the IP address configuration, click Save to save the setting onto the router.

Specify DNS

Enable – Click it to enable the function of DNS specified. It is used for local service (e.g., NTP, ping diagnostic) or

Page 79

Vigor2960 Series User’s Guide

used for forwarding packets to PC on LAN/VPN. Disable – Click it to disable the function of DNS specified.

DNS

Add – click this button to have a field for adding a new IP

address.

Save – click this button to save the setting.

Apply

Click it to save the configuration and exit the dialog.

Cancel

Click it to exit the dialog without saving the configuration.

 If you choose PPTP as IPv4 protocol type, click the PPTP Tab to open the

following page:

Available parameters are listed as follows:

Item Description PPTP Over

Choose a proper protocol, Static or DHCP. After finished the settings in such page, you need to open the Static or DHCP tab for configuring the settings there.

Server Address

Type the IP address of PPTP server offered by your ISP.

Username

Type the user name offered by your ISP.

Password

Type the password offered by your ISP.

MTU/MRU

Type the value of MTU/MRU. The default value is 1452.

Debug

Click Enable to display the PPTP debug message in syslog. The default setting is Disable.

Always On

Enable – Click it to enable the function of Always On. The

Page 80

Vigor2960 Series User’s Guide

router will keep network connection all the time.

Disable – Click it to disable the function of Always On.

Connection Detection Mode

Select a detecting mode for this WAN interface. There are two ways PING and HTTP supported in Vigor router for you to choose to send the request out.

Connection Detection Host

If you choose PING/HTTP as Connection Detection Mode, you have to specify the detection host address in this field. Use the default setting.

PING or HTTP.

Save – Click this button to save the setting.

Connection Detection Interval

Assign an interval period of time for each detecting.

Connection Detection Retry

Apply

After finished the PPTP configuration, please click Static or DHCP (according to the PPTP Over Protocol setting) to

modify the Static/DHCP configuration for such profile. Click it to save the configuration and exit the dialog.

Cancel

Click it to exit the dialog without saving the configuration.

 If you choose Link-Local as IPv6 protocol type

Link-Local address is used for communicating with neighbouring nodes on the same link. It is defined by the address prefix fe80::/64. You don't need to setup Link-Local address manually for it is generated automatically according to your MAC Address.

 If you choose PPP as IPv6 protocol type

Simply refer to the section of “If you choose PPPoE as IPv4 protocol type, click the PPPoE Tab to open the following page” for detailed information.

Page 81

Vigor2960 Series User’s Guide

 If you choose Static as IPv6 protocol type, click the StaticV6 tab to open the

following page:

Available parameters are listed as follows:

Item Description IPv6 Address

Type the IP address for such protocol.

IPv6 Prefix Length

Type your IPv6 address prefix length.

IPv6 Gateway Address

Type your IPv6 gateway address.

IPv6 DNS Server Address

Type your IPv6 primary DNS Server address.

Add – Click this button to have a field for adding a new IP address.

Save – Click this button to save the setting.

Apply

Click it to save the configuration and exit the dialog.

Cancel

Click it to exit the dialog without saving the configuration.

Page 82

Vigor2960 Series User’s Guide

 If you choose DHCP IA NA as IPv6 protocol type, click the DHCPV6 Tab to open

the following page:

Available parameters are listed as follows:

Item Description DHCP (IA_NA)

Gateway Address

Type the gateway IP address for IPv6 DHCP IA_NA mode.

DHCP (IA_NA) DNS Address

Add – Click this button to type primary DNS server address

for IPv6.

Save – Click this button to save the setting.

Apply

Click it to save the configuration and exit the dialog.

Cancel

Click it to exit the dialog without saving the configuration.

 If you choose DHCP IA PD as IPv6 protocol type

It is not necessary for you to configure any web page.

5. After finished the settings configuration, click Apply to save and apply the settings.

Page 83

Vigor2960 Series User’s Guide

44..11..11..22 UUSSBB WWAANN PPrrooffiilleess

Open WAN>>General Setup and click the USB WAN tab.

Each item will be explained as follows:

Item Description Edit

Modify the selected USB WAN profile. To edit a profile, simply select the one you want to modify

and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected rule.

Refresh

Renew current web page.

Profile

Display the profile name.

Enable

Display the status of the profile. False means disabled; True means enabled.

Description

Display a brief explanation for such profile.

Port

Display the physical WAN interface for such profile.

Protocol

Display the protocol selected by the profile.

Page 84

Vigor2960 Series User’s Guide

HHooww ttoo eeddiitt aa UUSSBB WWAANN pprrooffiillee

1. Choose one of the USB WAN profiles and click Edit.

2. The settings under Global tab are listed as below:

Available parameters are listed as follows:

Item Description Profile

Display the name of the USB WAN profile.

Enable

Check it to enable the USB WAN profile.

Description

Give the brief description for such profile.

Port

Display the physical WAN interface for such profile.

Protocol

Choose the connection mode for USB WAN.

Default

Click it to restore the default settings.

Apply

Click it to save and exit the dialog.

Cancel

Click it to exit the dialog without saving anything.

3. After finished the settings above, click the 3G/4G PPP or 4G DHCP tab (based on the

Protocol specified) to display the following page:

Page 85

Vigor2960 Series User’s Guide

Or,

Available parameters are listed as follows:

Item Description 3G/4G PPP

SIM PIN code -Type PIN code of the SIM card that will be

used to access Internet. Modem Initial String 1-Such value is used to initialize USB

modem. Please use the default value. If you have any question, please contact to your ISP.

Modem Initial String 2-The initial string 1 is shared with APN. In some cases, user may need another initial AT

Page 86

Vigor2960 Series User’s Guide

command to restrict 3G band or do any special settings. APN -APN means Access Point Name which is provided

and required by some ISPs. Type the name. Modem Dial String -Such value is used to dial through USB

mode. Please use the default value. If you have any question, please contact to your ISP.

PPP Username -Type the PPP username (optional). PPP Password -Type the PPP password (optional).

4G DHCP

SIM Pin code –Type PIN code of the SIM card that will be

used to access Internet. Network Mode – Force Vigor router to connect Internet

with the mode specified here. If you choose 4G/3G/2G as network mode, the router will choose a suitable one according to the actual wireless signal automatically.

APN Name – APN means Access Point Name which is provided and required by some ISPs.

Default

Click it to restore the default settings.

Apply

Click it to save and exit the dialog.

Cancel

Click it to exit the dialog without saving anything.

4. Enter all of the settings and click Apply.

Page 87

Vigor2960 Series User’s Guide

44..11..11..33 BBrriiddggee VVLLAANN PPrrooffiilleess

Open WAN>>General Setup and click the Bridge VLAN tab. It can specify a VLAN ID for WAN port and offers more advanced environmental

application for the users through the bridge technique in WAN port and LAN port.

Each item will be explained as follows:

Item Description Add

Click to create a new profile.

Edit

Modify the selected USB WAN profile. To edit a profile, simply select the one you want to modify

and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected rule.

Delete

Remove the selected WAN profile. Such function is available in Advance mode only.

To delete a profile, simply select the one you want to delete and click the Delete button.

Refresh

Renew current web page.

Profile Number Limit

Display the total number of the profiles to be created.

Profile

Display the profile name.

WAN Profile

Display the WAN profile selected.

LAN VLAN/Member

Display VLAN ID number of the LAN port selected.

Page 88

Vigor2960 Series User’s Guide

HHooww ttoo aadddd aa nneeww bbrriiddggee VVLLAANN pprrooffiillee

1. Click Add.

2. The settings are listed as below:

Available parameters are listed as follows:

Item Description Profile

Type the name of the profile.

WAN Profile

Use the drop down list to choose the WAN interface.

LAN VLAN/Member

Choose a VLAN profile from the drop down list. You have to open LAN>>Switch page and click 802.1Q

VLAN for creating VLAN ID number bound with LAN port (802.1Q VLAN profile) first. Otherwise, no profiles will be displayed here for you to specify.

Apply

Click it to save and exit the dialog.

Cancel

Click it to exit the dialog without saving anything.

3. Enter all of the settings and click Apply. The new profile will be shown as below.

Page 89

Vigor2960 Series User’s Guide

44..11..22 IInnbboouunndd LLooaadd BBaallaannccee

Vigor2960 can offer the mapped IP address to respond the DNS query coming from the remote end through the designate domain to reduce the loading of the network traffic.

Open WAN>>Load Balance and click the Inbound Load Balance tab.

Each item will be explained as follows:

Item Description Enable

Check the box the enable inbound load balance function.

Add

Add a new WAN profile for inbound load balance.

Edit

Modify the selected WAN profile. To edit a profile, simply select the one you want to modify

and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected rule.

Delete

Remove the selected WAN profile.

Page 90

Vigor2960 Series User’s Guide

To delete a profile, simply select the one you want to delete and click the Delete button.

Refresh

Renew current web page.

Profile Number Limit

Display the total number of the profiles to be created.

Enable

Display the status of the profile. False means disabled; True means enabled.

Domain Name

Display the domain name used by the profile.

Mode

Display the mode (failover or load balance) applied by the profile.

IP Mapping

Display the WAN interfaces used by the profile.

Weight

Display the weight(s) that WAN interface(s) used.

Alias Interface

Display the WAN interfaces used by the IP alias.

Display the alias IP settings used by the profile.

Alias Weight

Display the weight that the above IP address used.

HHooww ttoo ccrreeaattee aa nneeww IInnbboouunndd LLooaadd BBaallaannccee pprrooffiillee

Such page allows you to create a new WAN profile for inbound load balance.

1. Open WAN>>Inbound Load Balance.

2. Simply click the Add button to open the following dialog.

Available parameters are listed as follows:

Item Description Status

Check this box to enable such profile.

Domain Name

Type an available domain name to serve the inbound load balance.

Page 91

Vigor2960 Series User’s Guide

Mode

Specify the type (Load Balance or Failover) of the WAN profile for inbound load balance

Priority Setting

It is available only when Failover is selected as the Mode. There are five levels (Top, 2, 3, 4 and 5) which can be

specified for WAN profiles (including default WAN profiles and user-defined WAN profiles).

Interface Mapping/Weight

The domain name will inform the remote end with the IP address for DNS query asked by the remote end.

The incoming query from the WAN interfaces specified in IP Mapping will be processed according to the weight value.

Add – Click it to choose a WAN interface and weight. Save – Click it to save the settings. IP Mapping – Use the drop down list to choose a WAN

interface profile which will be used by the domain.

Weight – Use the drop down list to choose the one you want.

Alias Setting

The purpose of such setting is to specify a WAN IP address from the WAN interface or by typing it manually to respond DNS query.

Add – Click it to add a new IP address. Save – Click it to save the settings. Alias From WAN Interface – The alias IP setting can be

specified from existed WAN IP alias. Alias From Manual Input – The alias IP setting can be

specified manually. The Alias Interface is not necessary for such method.

Alias Interface –Use the drop down list to choose a WAN interface profile for the alias IP setting.

Alias – Use the drop down list to choose an alias IP setting (for Alias From WAN Interface) or type an IP address manually (for Alias From Manual Input).

Weight –Use the drop down list to choose the one you want.

Page 92

Vigor2960 Series User’s Guide

3. After finished the settings on the Basic page, click the Detail Tab to open the following

dialog.

Available parameters are listed as follows:

Item Description DNS Parameter

To configure Vigor router as a DNS server, type the related information for applying the function of DNS.

TTL – It means Time to live of a DNS response. Available setting range is from 0 to 2147483647.

Refresh – Set the time for the PC in LAN to refresh the data. Retry – Set the times of retry if the PC fails to contact with

Vigor router before the refreshing expired. Expire – PC stops responding to the query from Vigor router

when such time setting has expired. Negative Cache TTL – Set the negative caching time (name

error).

Email – Type the e-mail address of the administrator.

NS Record

This page is used to specify name server which will be used as DNS server.

Add – Click it to add a new server with specified name and IP address.

Save – Click it to save the settings. HOST – Type the domain name of the server. This is

optional. If no information added here, the router will use the DNS server configured in Domain Name under the Basic tab.

Name Server –Type the URL for the name server which will be used to receive the DNS query forwarded by HOST.

IP Address – This is optional. If required, simply type the IP address of the NS record server.

MX Record

This is used to specify the mail server with IP address. Add –Click it to add a new server with specified name and IP

Page 93

Vigor2960 Series User’s Guide

address.

Save – Click it to save the settings. Host –Type the name (URL) of the mail server. Mail Server – Type the name (URL) of the mail server. IP Address – Type the IP address of the mail server. Preference – Set a number for the priority of such mail

server.

Additional A Record

It is used to record the DNS query by IPv4 address.

Add –Click it to add a new host with specified IP address. Save – Click it to save the settings. Host –Set a domain name. IP Address – Type the IP address of the mail server.

AAAA Record

It is used to record the DNS query by IPv6 address.

Add –Click it to add a new host with specified IPv6 address. Save – Click it to save the settings. Host – Set a domain name. IPv6 Address –Type the IPv6 address of the host.

Any query concerning of Host will be forwarded to the server selected in Reference for advanced process.

CNAME Record

It is used to record the DNS query for CNAME.

Add – Click it to add a new host with specified reference. Save – Click it to save the settings. Host – Set a domain name. Reference – Choose a sub domain name from the drop down

list. Any query concerning of Host will be forwarded to the server

selected in Reference for advanced process.

4. Click Apply. A new profile will be added on the page. You can create sub-domain by clicking

on the left side of the selected inbound load

balance profile. A sub-domain setting page will appear for you to add new profile.

Note that the configuration is similar to the way stated on the above steps.

Page 94

Vigor2960 Series User’s Guide

44..11..33 SSwwiittcchh

This page allows you to configure Mirroring Port, Mirrored Port, enable/disable WAN interface, and configure 802.1Q VLAN ID for different WAN interfaces, and so on.

Page 95

Vigor2960 Series User’s Guide

44..11..33..11 880022..11QQ VVLLAANN

Packets passing through the WAN interface might be tagged or untagged with VLAN ID number. It depends on the setting configured in this page for VLAN ID configured in WAN >>General Setup>>Profile relates to the VLAN ID setting configured here.

This page simply displays current status of 802.1Q VALN setting profiles.

Each item will be explained as follows:

Item Description Refresh

Click it to reload this page.

VLAN ID

Display the VLAN ID number.

Member

Display number of the WAN interface for the packets tagged with such VLAN ID number to pass through.

Untag

Display number of the WAN interface for the VLAN ID will be untagged for packets passing through the WAN interface selected.

Page 96

Vigor2960 Series User’s Guide

44..11..33..22 MMiirrrroorr CCoonnffiigguurraattiioonn

The administrator can monitor all the packets passing through mirrored port with the mirroring port. It is useful for the administrator to analyze the troubles on Network.

Available parameters are listed as follows:

Item Description Enable This Profile

Check the box to enable the Mirror function for the switch.

Mirroring Port

Select a port for the administrator to use for viewing traffic sent from mirrored ports.

Mirrored Port

Select a port to make the packets passing through it monitored by the administrator.

Apply

Click it to save the configuration.

Cancel

Click it to discard the settings configured in this page.

Page 97

Vigor2960 Series User’s Guide

44..11..33..33 IInntteerrffaaccee CCoonnffiigguurraattiioonn

This page allows you to modify the status (enable / disable), speed(Auto,10M,100M,1000M) and duplex (Half/Full) for the WAN ports respectively.

Each item will be explained as follows:

Item Description Edit

Choose the interface listed below and click the Edit button to modify the settings. A pop up window will appear for you to change the settings.

Interface – Display the name of WAN interface. Enable – Check it to enable such interface. Speed – Use the drop down list to specify the transmission

rate (Auto, 10M, 100M or 1000M) for such interface. Apply – Click it to save and exit the dialog.

Page 98

Vigor2960 Series User’s Guide

Cancel – Click it to exit the dialog without saving anything.

Refresh

Renew current web page.

Interface

Display the name of the WAN port on the router.

Enable

Display the status of the profile. False means disabled; True means enabled.

Duplex

Display the duplex used (full or half) by such profile.

Speed

Display the transmission rate (10M, 100M, 1000M or Auto) of the date for such profile.

44..22 LLAANN

Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP.

The most generic function of Vigor router is NAT. It creates a private subnet of your own. As mentioned previously, the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address. What NAT does is to translate the packets from private IP address to public IP address to forward the right packets to the right host and vice versa. Besides, Vigor router has a built-in DHCP server that assigns private IP address to each local host.

44..22..11 GGeenneerraall SSeettuupp

This page allows you to set LAN profiles for PCs in LAN. Settings of DHCP, DHCP Relay, RADVD and DHCPv6 settings are generated automatically by the system when the LAN profile is created. You can edit these settings by switching into each tab individually.

Page 99

Vigor2960 Series User’s Guide

Note: One LAN profile shall be enabled at least to keep the normal operation. The default LAN profile named “lan1” shall not be deleted. Otherwise, the system might be damaged. If such file is deleted due to careless, please reset your router to restore the default setting.

44..22..11..11 GGeenneerraall SSeettuupp

This page allows you to enable the profile, give a brief explanation for such profile, specify the VLAN ID, specify MAC address, and choose protocol type for such profile.

Each item will be explained as follows:

Item Description Add

Add a new LAN profile.

Edit

Modify the selected LAN profile. To edit a profile, simply select the one you want to modify

and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected rule.

Delete

Remove the selected LAN profile. To delete a rule, simply select the one you want to delete and

click the Delete button.

Refresh

Renew current web page

Profile Number Limit

Display the total number of the profiles to be created.

Profile (max length:7)

Display the name of the LAN profile.

Enable

Display the status of the profile. False means disabled; True means enabled.

Description

Display the brief explanation for the LAN profile.

VLAN ID

Display the VLAN ID configured for the LAN profile.

IPv4 Protocol

Display the IPv4 protocol type for the LAN profile.

Page 100

Vigor2960 Series User’s Guide

IP Address

Display the IP address for such LAN profile.

Subnet Mask

Display the subnet mask for such LAN profile.

DHCP Server

Display the status (Enable/Disable) of the DHCP server.

IPv6 Protocol

Display the IPv6 protocol type for the LAN profile.

HHooww ttoo aadddd aa nneeww LLAANN pprrooffiillee

1. Open LAN>>General Setup and click the General Setup tab.

2. Click the Add button to open the following dialog. Different protocol type selected will

bring up different configuration web page.

Available parameters are listed as follows:

Item Description Profile

(max length:7)

Type the name of the LAN profile.

Enable

Check this box to enable such profile.

Description

Type the description for the new LAN profile.

VLAN ID

Type a number as the VLAN ID to make the data be identified while performing data transmission.

Priority(802.1p)

Type the packet priority number for such profile. The range is from 0 to 7.

Default MAC Address

Enable – Click it to enable the default MAC address for such

profile. Disable – Click it to type the MAC address manually for such

profile.